24 matches found
CVE-2022-46169
CVE-2022-46169 POC Este es un script de Prueba de Concepto POC para la vulnerabilidad CVE-2022-46169 que afecta a Cacti versión 1.2.22. Descripción La vulnerabilidad CVE-2022-46169 permite una inyección de comandos sin autenticación en versiones de Cacti hasta la 1.2.22, logrando así una ejecució...
CVE-2022-46169-Cacti-1.2.22
CVE-2022-46169 Este exploit es una versión modificada del script original de @FredBrave y adaptada por @arthurcortesr y @alv-david. Uso/Ejemplos python3 CVE-2022-46169.py -u http://XX.XX.XX.XX --LHOST XX.XX.XX.XX --LPORT XXXX --host-id X --local-id X Resultados esperados Testing hostid=X,...
CVE-2022-46169-CACTI-1.2.22
CVE-2022-46169-CACTI-1.2.22 Este es un exploit de CVE-2022-46169 para cacti 1.2.22. Este exploit permite, mediante un RCE, obtener una reverse shell en tu equipo. Requisitos optparse requests Uso Escucha en un puerto de tu máquina y luego ejecuta el exploit de la siguiente manera. python3...
EUVD-2018-13544
Malware in sbrugna...
EUVD-2018-3614
Malware in sbrugna...
EUVD-2008-2084
Malware in sbrugna...
EUVD-2018-13545
Malware in sbrugna...
Cacti 1.2.22 unauthenticated command injection
This module exploits an unauthenticated command injection vulnerability in Cacti through 1.2.22 CVE-2022-46169 in order to achieve unauthenticated remote code execution as the www-data user. The module first attempts to obtain the Cacti version to see if the target is affected. If LOCALDATAID...
SQL Injection
centreon/centreon is vulnerable to SQL injection. An attacker is able to inject and execute arbitrary SQL commands via the hostid parameter...
SQL Injection
Centreon Web is vulnerable to SQL injection. The hostid parameter in makeXMLListServices.php is directly appended to the SQL query, allowing an attacker to inject and execute arbitrary SQL script through the affected parameter...
Sql injection
imggantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the hostid parameter...
Sql injection
makeXMLListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the hostid parameter...
CVE-2018-21021
imggantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the hostid parameter...
CVE-2018-21022: Improper Neutralization of Special Elements used in an SQL Command
makeXMLListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the hostid parameter...
CVE-2018-21021: Improper Neutralization of Special Elements used in an SQL Command
imggantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the hostid parameter...
CVE-2018-11589
Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php, the chartId parameter in ExportCSVServiceData.php, the searchCurve parameter in listComponentTemplates.php, or the...
Researchers Reverse Engineer Dropbox
Researchers have cracked open cloud storage service Dropbox, reverse engineering the encryption protecting the client in order to open it up to further security analysis. The engineers, Dhiru Kholia of Openwall and Przemyslaw Wegrzyn of CodePainters, also managed to demonstrate how to use...
CVE-2010-1644: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing HPC Solution and other products, allow remote attackers to inject arbitrary web script or HTML via the 1 hostname or 2 description parameter to host.php, or 3 the hostid paramet...