CVE-2017-15936

In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent definitions page, the script will get executed...

Axis Communications MPQTPACS 5.20.x - Server-Side Include Daemon Remote Format String

Axis Communications MPQTPACS 5.20.x - Server-Side Include Daemon Remote Format String !/usr/bin/env python2.7 SOF Remote Format String Exploit Axis Communications MPQT/PACS Server Side Include SSI Daemon Research and development by bashis 2016 This format string vulnerability has following...

Axis Communications MPQT/PACS 5.20.x - Server Side Include (SSI) Daemon Remote Format String

Exploit for multiple platform in category remote exploits !/usr/bin/env python2.7 SOF Remote Format String Exploit Axis Communications MPQT/PACS Server Side Include SSI Daemon Research and development by bashis 2016 This format string vulnerability has following characteristic: - Heap Based...

Axis Communications MPQT/PACS 5.20.x - Server-Side Include Daemon Remote Format String

!/usr/bin/env python2.7 SOF Remote Format String Exploit Axis Communications MPQT/PACS Server Side Include SSI Daemon Research and development by bashis 2016 This format string vulnerability has following characteristic: - Heap Based Exploiting string located on the heap - Blind Attack No output...

Aircrack-ng 1.2 RC 3 - WEP and WPA-PSK Keys Cracking Program

Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the PTW attack, thus making the attack much faster compared to other...

Pandora FMS 5.0 - 5.1 Authentication Bypass Vulnerability

Pandora FMS is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:artica:pandorafms...

Pandora FMS 5.0, 5.1 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Authentication Bypass in Pandora FMS Google Dork: intitle:"Pandora FMS - The Flexible Monitoring System" intitle:"Pandora FMS - el Sistema Flexible de Monitorización" Date: 10/06/2015 Exploit Author: Manuel Mancera sinkmanu |...

Pandora FMS 5.0 / 5.1 Authentication Bypass

================================================================ Authentication Bypass in Pandora FMS ================================================================ Information -------------------- Name: Pandora FMS - Authentication Bypass Affected Software : Pandora FMS Affected Versions: 5.0,...

Pandora FMS 5.05.1 - Authentication Bypass

Pandora FMS 5.05.1 - Authentication Bypass Exploit Title: Authentication Bypass in Pandora FMS Google Dork: intitle:"Pandora FMS - The Flexible Monitoring System" intitle:"Pandora FMS - el Sistema Flexible de Monitorización" Date: 10/06/2015 Exploit Author: Manuel Mancera sinkmanu | mmancera at...

Pandora FMS 5.0/5.1 - Authentication Bypass

Exploit Title: Authentication Bypass in Pandora FMS Google Dork: intitle:"Pandora FMS - The Flexible Monitoring System" intitle:"Pandora FMS - el Sistema Flexible de Monitorización" Date: 10/06/2015 Exploit Author: Manuel Mancera sinkmanu | mmancera at a2secure dot com Vendor Homepage:...

Aircrack-ng 1.2 RC 2 - WEP and WPA-PSK keys cracking program

Here is the second release candidate. Along with a LOT of fixes, it improves the support for the Airodump-ng scan visualizer. Airmon-zc is mature and is now renamed to Airmon-ng. Also, Airtun-ng is now able to encrypt and decrypt WPA on top of WEP. Another big change is recent version of GPSd now...

Pandora FMS 5.1 SP1 - SQL Injection Vulnerability

Pandora FMS version 5.1 SP1 suffers from a remote SQL injection vulnerability. Document Title: =============== Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability Product & Service Introduction: =============================== Pandora FMS is a monitoring Open Source software. It watches your...

Pandora FMS 5.1 SP1 - SQL Injection

Document Title: =============== Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1355 Release Date: ============= 2015-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 1355...

Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability

Document Title: =============== Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1355 Release Date: ============= 2015-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 1355...

Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability

Document Title: =============== Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1355 Release Date: ============= 2015-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 1355...

Pandora FMS <= 5.1 SP1 XSS

The Pandora FMS console hosted on the remote web server is version 5.1 SP1 or prior. It is, therefore, affected by a cross-site scripting vulnerability due to a flaw in 'index.php' where the 'refr' parameter is not properly validated before being returned to users. This can allow a remote attacke...

Pandora FMS <= 5.0 SP2 SQLi

The Pandora FMS console hosted on the remote web server is version 5.0 SP2 or prior. It is, therefore, affected by a SQL injection vulnerability via the 'user' parameter of the mobile login interface, which a remote attacker can exploit to inject SQL queries into the back-end database, resulting ...

Pandora FMS v5.1 SP1 - Persistent SNMP Editor Vulnerability

Document Title: =============== Pandora FMS v5.1 SP1 - Persistent SNMP Editor Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1356 Release Date: ============= 2015-01-14 Vulnerability Laboratory ID VL-ID: ==================================== 13...

Pandora FMS 5.1 SP1 Cross Site Scripting

Document Title: =============== Pandora FMS v5.1 SP1 - Persistent SNMP Editor Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1356 Release Date: ============= 2015-01-14 Vulnerability Laboratory ID VL-ID: ==================================== 13...

Pandora FMS v5.1 SP1 - Persistent SNMP Editor Vulnerability

Document Title: =============== Pandora FMS v5.1 SP1 - Persistent SNMP Editor Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1356 Release Date: ============= 2015-01-14 Vulnerability Laboratory ID VL-ID: ==================================== 13...