263 matches found
CVE-2022-24716
CVE-2022-24716 Exploit per la vulnerabilità: Vulnerabilità di divulgazione arbitraria di file in Icinga Web 2 2.8.6, 2.9.6, 2.10 https://www.sonarsource.com/blog/path-traversal-vulnerabilities-in-icinga-web/ Aiuto: python3 exploit.py -h Esempio d'uso: python3 -u http://127.0.0.1:8080 -f /etc/pass...
CVE-2022-24715
CVE-2022-24715 Icinga Web 2 - Esecuzione Remota di Codice Autenticata 2.8.6, 2.9.6, 2.10 AVVISO: Questo script è realizzato per verificare la sicurezza dei sistemi. Utilizza questo script solo sui tuoi sistemi o su sistemi per cui hai ottenuto il permesso scritto di effettuare test...
CVE-2022-24716
CVE-2022-24716 Icinga Web 2 — это программное приложение, предназначенное для мониторинга компьютерных систем и сетей. Оно имеет веб-интерфейс, позволяющий пользователям просматривать и управлять системными ресурсами. Однако в Icinga Web 2 существует уязвимость, которая позволяет...
CVE-2022-24715-go
CVE-2022-24715 L'exploit di Icinga Web 2 scritto in go. Il codice python originale si trova in: https://packetstormsecurity.com/files/173516/Icinga-Web-2.10-Remote-Code-Execution.html...
CVE-2022-24716-2
CVE-2022-24716 Icinga Web 2 ist eine quelloffene Überwachungs-Weboberfläche, ein Framework und eine Kommandozeilenschnittstelle. Nicht authentifizierte Benutzer können die Inhalte von benutzerzugänglichen lokalen Systemdateien des Webservers offenlegen, einschließlich...
CVE-2022-24716
CVE-2022-24716 Exploit für die Schwachstelle: Schwachstelle der beliebigen Dateioffenlegung in Icinga Web 2 2.8.6, 2.9.6, 2.10 DISCLAIMER: Dieses Skript dient zur Überprüfung der Systemsicherheit. Verwenden Sie dieses Skript nur auf Ihren eigenen Systemen oder auf Systemen, für die Sie eine...
CVE-2022-24715
Icinga Web 2 - Esecuzione remota di codice autenticata 2.8.6, 2.9.6, 2.10 Esecuzione remota di comandi Reverse shell Utilizzo root@kitploit: usage: exploit.py -h -u URL -U USER -P PASSWORD -i IP -p PORT Welcome. options: -h, --help show this help message and exit -u URL, --url URL Insert URL...
CVE-2022-24716
CVE-2022-24716 Beliebige Datei-Offenlegungsschwachstelle in Icinga Web 2 2.8.6, 2.9.6, 2.10 Icinga Web 2 ist eine Open-Source-Überwachungs-Weboberfläche, ein Framework und eine Befehlszeilenschnittstelle. Nicht authentifizierte Benutzer können den Inhalt von Dateien des lokalen Systems einsehen,...
CVE-2026-42224
ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may ha...
CVE-2026-42224
ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may ha...
CVE-2026-42224
ipl/web is a set of common web components for php projects. Prior to version 0.13.1, the vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may have no...
CVE-2026-42224 ipl/web is vulnerable to reflected XSS by malformed search requests
ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may ha...
GHSA-55WF-5M3Q-6JJF ipl/web is vulnerable to reflected XSS by malformed search requests
Impact The vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may have no immediate chance to notice any wrongdoing. Patches Version 0.13.1 includes a fix for...
ipl/web is vulnerable to reflected XSS by malformed search requests
Impact The vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a specifically prepared website and may have no immediate chance to notice any wrongdoing. Patches Version 0.13.1 includes a fix for...
PT-2026-37180
Name of the Vulnerable Software and Affected Versions Icinga Web versions prior to 0.13.1 Description An issue allows an attacker to inject malicious Javascript into a victim's browser to execute it within the context of Icinga Web. This occurs when a victim visits a specifically prepared website...
UBUNTU-CVE-2022-50942
Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the EventListener.handleEvent method to execute arbitrary scripts, potentially leading to session hijacki...
CVE-2022-50942 Incinga Web 2.8.2 Client-Side Cross-Site Scripting via EventListener
Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the EventListener.handleEvent method to execute arbitrary scripts, potentially leading to session hijacki...
Icinga Web 2 跨站脚本漏洞
Icinga Web 2 is an open-source monitoring and measurement solution developed by Icinga. Version 2.8.2 of Icinga Web 2 contains a cross-site scripting vulnerability. This vulnerability stems from the icinga.min.js file, which has a client-side cross-site scripting vulnerability. It may lead to...
