CVE-2025-24367-PoC-Cacti

Cacti CVE‑2025‑24367 認証済みRCE PoC このリポジトリには、Cacti の認証済みリモートコード実行（RCE）の脆弱性である CVE‑2025‑24367 の概念実証（PoC）エクスプロイトが含まれています。 この問題は、グラフテンプレート処理における入力サニタイズの不備を悪用します。“Unix – Logged in Users” グラフテンプレート（ID 226）に悪意のあるコンテンツを注入することで、任意の PHP ファイルを Cacti の Web ルートに書き込み、サーバー上でコマンドを実行することが可能になります。 この PoC...

CVE-2025-24367

CVE-2025-24367 CVE-2025-24367 - Cacti 已验证图形模板远程代码执行...

CVE-2025-24367

CVE-2025-24367 - Cacti 認証済みグラフテンプレート RCE 使用方法と安全性 重要 — 最初にお読みください: このリポジトリおよび exploit.py は教育および研究目的のみ で提供されています。明示的な書面による承認 を得ていないシステム、ネットワーク、またはサービスに対してこのコードを使用しないでください 。コンピュータシステムへの不正アクセスは違法かつ非倫理的です。このコードを使用することにより、適用される法律および組織の方針に従うことに同意したものとみなされます。 要件 Python 3.8+ python3 -m venv venv source...

Exploit for Improper Neutralization of Line Delimiters in Cacti

Cacti CVE-2025-24367 Authenticated RCE PoC This repository co...

Exploit for Improper Neutralization of Line Delimiters in Cacti

CVE-2025-243...

📄 Cacti 1.2.29 Remote Command Execution

Proof of concept exploit that demonstrates how authenticated users with access to Graph Templates in Cacti can abuse RRD invocation parameters to write arbitrary PHP files, then trigger execution leading to remote command execution. Version 1.2.29 is affected...

EUVD-2020-30171

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-1000031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in graphtemplatesinputs.php in Cacti 0.8.8b allows remote attackers to execute arbitrary SQL commands via the graphtemplateinputid a...

Linux Distros Unpatched Vulnerability : CVE-2025-26520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti through 1.2.29 allows SQL injection in the template function in hosttemplates.php via the graphtemplate parameter. NOTE: this issue exists because of an...

CVE-2024-33854

A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23...

SUSE CVE-2025-26520

Cacti through 1.2.29 allows SQL injection in the template function in hosttemplates.php via the graphtemplate parameter. NOTE: this issue exists because of an incomplete fix for CVE-2024-54146...

CVE-2025-26520

Cacti through 1.2.29 allows SQL injection in the template function in hosttemplates.php via the graphtemplate parameter. NOTE: this issue exists because of an incomplete fix for CVE-2024-54146...

DEBIAN-CVE-2025-26520

Cacti through 1.2.29 allows SQL injection in the template function in hosttemplates.php via the graphtemplate parameter. NOTE: this issue exists because of an incomplete fix for CVE-2024-54146...

UBUNTU-CVE-2025-26520

Cacti through 1.2.29 allows SQL injection in the template function in hosttemplates.php via the graphtemplate parameter. NOTE: this issue exists because of an incomplete fix for CVE-2024-54146...

Cacti 安全漏洞

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A security vulnerability exists in Cacti version 1.2.29, which stems from...

CVE-2025-26520

Cacti through 1.2.29 allows SQL injection in the template function in hosttemplates.php via the graphtemplate parameter. NOTE: this issue exists because of an incomplete fix for CVE-2024-54146...

CVE-2025-26520

Cacti through 1.2.29 allows SQL injection in the template function in hosttemplates.php via the graphtemplate parameter. NOTE: this issue exists because of an incomplete fix for CVE-2024-54146...

SUSE CVE-2024-54146

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of hosttemplates.php using the graphtemplate parameter. This vulnerability is fixed in 1.2.29...

SUSE CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

CVE-2024-54146

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of hosttemplates.php using the graphtemplate parameter. This vulnerability is fixed in 1.2.29...