1211 matches found
PT-2023-28834 · Librenms · Librenms
Name of the Vulnerable Software and Affected Versions: librenms/librenms versions prior to 23.8.0 Description: The issue is related to Cross-site Scripting XSS - Reflected in the GitHub repository librenms/librenms. This type of attack occurs when an application includes user input in its respons...
Reflected XSS
Description Reflected Cross-Site Scripting XSS vulnerability in LibreNMS 22.12.0 - Fri Dec 30 2022 10:11:51 GMT+0100 allows attackers to execute arbitrary external javascript code in the browser affected from /ports/group parameter. 1. Login 2. Navigate PoC link Proof of Concept...
SNMP location XSS vulnerability
Description By including some HTML in the "Location" field of the snmpd configuration of a managed device, an attacker can inject HTML into the LibreNMS "Devices" tab, which then gets rendered when the page is viewed. EDIT: I'm having difficulties developing a proper exploit for this beyond the...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting.The vulnerability exists in destroy function of DeviceGroupController.php and PortGroupController.php due to insufficient input validation in the pop-up notifications which allows an attacker to inject and execute malicious javaScript...
Insufficient Session Expiration
librenms/librenms uses insecure session management. The vulnerability exists due to lack of validate user session user session authentication allows a attacker to bypass authentication...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to Cross-site Scripting XSS. The vulnerability exists in destroy function of multiple classes due to the lack of validation of the user inputs which allows a remote attacker to inject and execute malicious javascript into the system...
LibreNMS Cross-Site Scripting Vulnerability (CNVD-2022-80697)
LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments and automatic updates.LibreNMS versions prior to 22.10.0 have a security vulnerability that stems from the presence of...
LibreNMS Code Issues Vulnerabilities
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...
Unspecified Vulnerability in LibreNMS
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0, which stems fro...
LibreNMS code issue vulnerability
LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments, and automatic updates.LibreNMS versions prior to 22.10.0 have a security vulnerability that stems from insufficient sessi...
LibreNMS Cross-Site Scripting Vulnerability (CNVD-2022-81234)
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...
LibreNMS Cross-Site Scripting Vulnerability (CNVD-2022-81232)
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists in update function of UserController.php because the username is not properly sanitized in the admin user overview which allows an attacker to inject and execute arbitrary javascript...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists in notifications.inc.php due to lack of escaping in title which allows an attacker to inject and execute malicious javascript...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in the title parameter of notifications.inc.php, allowing an attacker to inject and execute malicious javascript...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation in the map items in print-alert-rules.php, which allows a remote attacker to inject and execute malicious JavaScript into the system...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in the billname attribute in the printportlist function of bill.inc.php, allowing an attacker to inject and execute malicious javascript...
GHSA-264W-GW9G-FHGJ Cross-site Scripting in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
