CVE-2026-27875

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05...

CVE-2026-27875

Johnson Controls Simplex Incident Manager / Autocall Fire Administrator (before 2.01.05 ) stores user credentials—passwords and authentication tokens—in unencrypted form within system memory while running. A local attacker with low privileges can extract these embedded sensitive data using memory...

EUVD-2026-64036

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05...

CVE-2026-27875 Simplex Incident Manager Clear Test

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05...

PT-2026-79419

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05...

Johnson Controls Simplex Incident Manager

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow a local attacker with low privileges to extract user credentials passwords and authentication tokens from system memory, potentially leading to unauthorized access to the application and connected systems. 2. RECOMMENDED...

Microsoft Incident Response Retainer is generally available

The task of securing organizations is constantly changing and getting more complex. Many organizations don’t have the time, resources, or expertise to build an in-house incident response program. For customers that want help remediating an especially complex breach or avoiding one altogether,...

Nagios IM SQL Injection Vulnerability

Nagios Incident Manager IM is a network time manager from the US-based Nagios. The product is primarily used to manage and track network event history. A SQL injection vulnerability exists in Nagios IM versions prior to 2.2.7. A remote attacker can exploit this vulnerability to execute arbitrary...

Nagios IM Arbitrary Code Execution Vulnerability

Nagios Incident Manager IM is a network time manager from the US-based Nagios. The product is primarily used to manage and track network event history. A security vulnerability exists in Nagios IM versions prior to 2.2.7. An attacker can exploit the vulnerability to execute arbitrary code...

Nagios IM Authorization Bypass Vulnerability

Nagios Incident Manager IM is a network time manager from the US-based Nagios. The product is primarily used to manage and track network event history. A security vulnerability exists in Nagios IM versions prior to 2.2.7. An attacker can exploit this vulnerability to perform unauthorized operatio...

Nagios Incident Manager 2.0.0 - Multiple Vulnerabilities

Nagios Incident Manager 2.0.0 - Multiple Vulnerabilities , , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Nagios Incident Manager Multiple Vulnerabilities Affected versions: Nagios Incident Manager...

Nagios Incident Manager 2.0.0 - Multiple Vulnerabilities

Exploit for php platform in category web applications Nagios Incident Manager Multiple Vulnerabilities Affected versions: Nagios Incident Manager /nagiosim/reports/download//mttr/ Method = GET POC Payload = startdate=2016-05-06&enddate=2016-05-06&types=2" "";touch,/tmp/MYFILE;echo URL =...

Nagios Incident Manager 2.0.0 - Multiple Vulnerabilities

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Nagios Incident Manager Multiple Vulnerabilities Affected versions: Nagios Incident Manager /nagiosim/reports/download//mttr/ Method = GET POC Payload...

Nagios Incident Manager 2.0.0 XSS / SQL Injection / Code Execution

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Nagios Incident Manager Multiple Vulnerabilities Affected versions: Nagios Incident Manager /nagiosim/reports/download//mttr/ Method = GET POC Payload...

Nagios XI Incident Manager Integration Component SQL Injection

A SQL injection vulnerability has been reported in the Nagios Incident Manager IM integration component of Nagios XI. The vulnerability is due to insufficient parameter validation when processing HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending a special...

Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities

Document Title: =============== Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 105 Product & Service Introduction: =============================== Pandora FMS is a monitorin...