WordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)

Software Download Monitor Type Plugin Vulnerable versions = 4.8.1 Fixed in 4.8.2 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-31219 Patch priority Low CVSS severity Low 4.1 Developer WPChill PSID fb7b8d305714 Credits Mika Required privilege Administrator...

A Framework for Enhanced Security: Continuous Threat Exposure Management (CTEM)

If you're a cybersecurity professional, you're likely familiar with the sea of acronyms our industry is obsessed with. From CNAPP, to CWPP, to CIEM and all of the myriad others, there seems to be a new initialism born each day. In this article, we'll look at another trending acronym – CTEM, which...

CVE-2021-4336

A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduledreports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to...

CVE-2021-4336

A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduledreports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to...

Sql injection

A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduledreports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to...

CVE-2021-4336 ITRS Group monitor-ninja scheduled_reports.php sql injection

A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduledreports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to...

CVE-2021-4336

CVE-2021-4336 affects ITRS Group monitor-ninja (versions up to 2021.11.1). The vulnerability originates from an SQL injection flaw in the file modules/reports/models/scheduled_reports.php. The issue can potentially allow unauthorized data access or modification through the affected functionality;...

CVE-2021-4336 ITRS Group monitor-ninja scheduled_reports.php sql injection

A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduledreports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to...

ITRS Group monitor-ninja SQL注入漏洞

ITRS Group monitor-ninja is a modern Web GUI for ITRS Group's Naemon. An SQL injection vulnerability exists in ITRS Group monitor-ninja version 2021.11.1 and earlier, which stems from an issue in the file modules/reports/models/scheduledreports.php that can lead to sql injection...

PT-2023-12439 · Itrs · Monitor-Ninja

Name of the Vulnerable Software and Affected Versions: ITRS Group monitor-ninja versions up to 2021.11.1 Description: A critical issue affects some unknown functionality of the file modules/reports/models/scheduled reports.php, leading to sql injection. The estimated number of potentially affecte...

bwm-ng 命令注入漏洞

bwm-ng is a small and simple console-based real-time network and disk io bandwidth monitor. A security vulnerability exists in bwm-ng that stems from improper input cleanup and is susceptible to command injection attacks...

LDAP user monitor DOWN after upgrade to ADC 13.1 33.27+ version

The LDAP user monitor shows DOWN after upgrading to the build 13.1 33.27+ version...

CVE-2023-2870

A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vulnerability is the function 0x80002014 of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host...

CVE-2023-2870

A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vulnerability is the function 0x80002014 of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host...

Design/Logic Flaw

A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vulnerability is the function 0x80002014 of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host...

CVE-2023-2870 EnTech Monitor Asset Manager IoControlCode 0x80002014 denial of service

A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vulnerability is the function 0x80002014 of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host...

CVE-2023-2870

CVE-2023-2870 affects EnTech Monitor Asset Manager 2.9. The root cause is a manipulation of the IoControlCode Handler’s function 0x80002014, leading to Denial of Service (local host). Exploitation is described as possible, with public disclosure of the exploit. Multiple connected sources corrobor...

EnTech Monitor Asset Manager 安全漏洞

EnTech Monitor Asset Manager is a plug-and-play monitor information utility from EnTech. A security vulnerability exists in EnTech Monitor Asset Manager version 2.9, which stems from a problem with the component IoControlCode Handler, and can be exploited by an attacker to conduct a...

PT-2023-23446 · Wondershare · Mobiletrans

Name of the Vulnerable Software and Affected Versions: MobileTrans version 4.0.11 Description: The issue is related to insecure permissions, allowing attackers to escalate privileges to local admin. This can be achieved by replacing the executable file, potentially leading to unauthorized access...

PT-2023-21915 · Entech · Entech Monitor Asset Manager

Name of the Vulnerable Software and Affected Versions: EnTech Monitor Asset Manager version 2.9 Description: A vulnerability was found in the function 0x80002014 of the component IoControlCode Handler, which leads to denial of service. The manipulation can be launched on the local host. The explo...