338 matches found
CVE-2024-30896
CVE-2024-30896 Summary A business logic flaw in influxdb allows users who own a valid allAccess token to escalate their privileges at operator level by listing current authorization tokens. Scenario Attacker might be a user which was gained access by an administrator via an allAccess token only...
CVE-2019-20933
लैब 5-CVE-2019-20933 I. सिस्टम विश्लेषण हमले की सतह की पहचान पर्यावरण में क्या चल रहा है, उससे शुरू करते हैं। मैं सभी सक्रिय कंटेनरों को सूचीबद्ध करता हूँ: root@kitploit: docker ps पीड़ित एक एकल पोर्ट उजागर करता है:8086। वर्तमान में, मेरे पास लक्ष्य के बारे में विस्तृत जानकारी नहीं है। docker ps...
InfluxDB <1.7.6 - Authentication Bypass
InfluxDB before 1.7.6 contains an authentication bypass vulnerability via the authenticate function in services/httpd/handler.go. A JWT token may have an empty SharedSecret aka shared secret. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...
InfluxDB-Exploit-CVE-2019-20933
استغلال InfluxDB CVE-2019-20933 استغلال لثغرة InfluxDB CVE-2019-20933، إصدارات InfluxDB قبل 1.7.6 تحتوي على ثغرة تجاوز المصادقة في دالة authenticate في services/httpd/handler.go لأن رمز JWT قد يحتوي على SharedSecret فارغ يُعرف أيضًا باسم shared secret. يتحقق الاستغلال مما إذا كان الخادم عرضة...
CVE-2019-20933
CVE-2019-20933 في InfluxDB قبل الإصدار 1.7.6 توجد ثغرة تجاوز المصادقة في دالة المصادقة في services/httpd/handler.go لأن رمز JWT قد يحتوي على SharedSecret فارغ المعروف أيضًا باسم shared secret. انظر https://nvd.nist.gov/vuln/detail/CVE-2019-20933 لمزيد من التفاصيل PoC يستغل هذا الـ PoC الثغرة أعلا...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-48586 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-48586 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
GHSA-JFWF-28XR-XW6Q vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71309 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19
CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19. A patched version of the package is available...
AZL-94217 CVE-2026-55969 affecting package influxdb 2.7.5-19
Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
AZL-93204 CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-39821 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-39821 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-27136 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-27136 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-25681 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-25681 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...