CVE-2024-32030-Nuclei-Template

قالب Nuclei لـ CVE-2024-32030 الوصف يحتوي هذا المستودع على قالب Nuclei لاكتشاف ثغرة CVE-2024-32030. تسمح هذه الثغرة بتنفيذ التعليمات البرمجية عن بُعد عبر تحليل JNDI لجمع مقاييس JMX. تفاصيل الثغرة المعرف: CVE-2024-32030 الاسم: JMX Metrics Collection JNDI RCE المؤلف: Hüseyin TINTAŞ الخطورة: حرجة...

EUVD-2016-0940

Malware in sbrugna...

Dario Health USB-C Blood Glucose Monitoring System 安全漏洞

The Dario Health USB-C Blood Glucose Monitoring System is a portable blood glucose monitoring device from Dario Health, Israel. A security vulnerability exists in the Dario Health USB-C Blood Glucose Monitoring System that stems from unauthenticated logs affecting metrics collection and event...

CVE-2024-32030 Remote code execution via JNDI resolution in JMX metrics collection in Kafka UI

Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka brokers by specifying their network address and port. As a separate feature, it also provides the ability to monitor the performance of Kafka brokers by connecting to their JMX...

Authentication Bypass

github.com/grafana/agent is vulnerable to authentication bypass. The library does not properly restrict access to config endpoints, allowing an attacker to authenticate against a system for discovering Prometheus targets and collecting metrics leads to information disclosure...

PT-2016-4482

Name of the Vulnerable Software and Affected Versions RabbitMQ for Pivotal Cloud Foundry PCF versions 1.6.x through 1.6.3 Description The issue allows context-dependent attackers to obtain sensitive information by reading the log data. This is because the metrics-collection component logs command...

CVE-2016-0929: Exposure of Sensitive Information to an Unauthorized Actor

The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry PCF 1.6.x before 1.6.4 logs command lines of failed commands, which might allow context-dependent attackers to obtain sensitive information by reading the log data, as demonstrated by a syslog message that contains credentials...