Lucene search
+L

54 matches found

Kitploit
Kitploit
β€’added 2026/11/02 8:24 a.m.β€’25 views

NetAlertX

NetAlertX - Network Visibility & Asset Intelligence Framework !mainmain πŸ“· Click for more screenshots !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...

6.6AI score
SaveExploits0References3
Kitploit
Kitploit
β€’added 2026/11/01 5:52 a.m.β€’32 views

CVE-2024-46506

CVE-2024-46506 This is a standalone Python implementation for CVE-2024-46506. I created this script because I could only find the Metasploit module and needed a lightweight, portable version that doesn't require the full Metasploit Framework. Disclaimer This tool is intended for educational...

10CVSS7.7AI score0.62666EPSS
SaveExploits4
Nuclei
Nuclei
β€’added 2026/10/31 2:03 a.m.β€’72 views

NetAlertX 23.01.14–24.x < 24.10.12 - Remote Code Execution

NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php. id: CVE-2024-46506 info: name:...

10CVSS7.8AI score0.62666EPSS
SaveExploits4
Packet Storm
Packet Storm
β€’added 2026/10/24 12:00 a.m.β€’18 views

NetAlertX 25.4.13 Authentication Bypass

NetAlertX versions before 25.4.14 contain an authentication bypass that allows unauthenticated requests to update application settings. The included proof of concept sends a savesettings request through index.php. https://packetstorm.news/download/237413...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
β€’added 2026/10/23 11:17 p.m.β€’16 views

Exploit for Missing Authentication for Critical Function in Netalertx

CVE-2025-32440 β€” NetAlertX Authentication Bypass PoC Workin...

10CVSS6.1AI score0.00604EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/10/01 11:49 a.m.β€’16 views

NetAlertX v26.10.0

NetAlertX - Network Visibility & Asset Intelligence Framework !mainmain πŸ“· Click for more screenshots !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...

6.5AI score
SaveExploits0References3
Kitploit
Kitploit
β€’added 2026/09/02 3:00 a.m.β€’36 views

NetAlertX v26.9.0

NetAlertX - Network Visibility & Asset Intelligence Framework !mainmain πŸ“· Click for more screenshots !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...

6.5AI score
SaveExploits0References3
Kitploit
Kitploit
β€’added 2026/08/05 4:24 a.m.β€’23 views

NetAlertX v26.8.5

NetAlertX - Network Visibility & Asset Intelligence Framework πŸ“· Click for more screenshots | | ---|---|--- !presencehttps://assets.kitploit.com/production/public/readmes/295/d2773fcfbdc9d1a31a6e178016e1333b685afe85257bb3...

6AI score
SaveExploits0References18
GithubExploit
GithubExploit
β€’added 2025/12/27 10:07 p.m.β€’316 views

Exploit for Missing Authentication for Critical Function in Netalertx

CVE-2024-46506 This is a standalone Python implementation for...

10CVSS7.7AI score0.62666EPSS
SaveExploits4
EUVD
EUVD
β€’added 2025/10/03 8:07 p.m.β€’20 views

EUVD-2025-16309

Malicious code in bioql PyPI...

10CVSS5.8AI score0.00604EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
β€’added 2025/07/06 10:21 p.m.β€’38 views

CVE-2025-48952

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application, a password...

9.4CVSS8.1AI score0.00595EPSS
SaveExploits1References1
NVD
NVD
β€’added 2025/07/04 11:15 p.m.β€’38 views

CVE-2025-48952

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application, a password...

9.4CVSS0.00595EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
β€’added 2025/07/04 10:12 p.m.β€’12 views

CVE-2025-48952 NetAlertX has Password Bypass Vulnerability due to Loose Comparison in PHP

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application, a password...

9.4CVSS8AI score0.00595EPSS
SaveExploits1References1
CVE
CVE
β€’added 2025/07/04 10:12 p.m.β€’61 views

CVE-2025-48952

NetAlertX (pre-25.6.7) contains an authentication bypass vulnerability in the PHP login check. The issue arises from a loose comparison using the == operator in front/index.php (line 40), which allows specially crafted SHA-256 magic hashes to bypass password verification. Hash values starting wit...

9.4CVSS8AI score0.00595EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2025/07/04 12:00 a.m.β€’11 views

CVE-2025-48952: Incorrect Comparison

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application, a password...

9.4CVSS8.1AI score0.00595EPSS
SaveExploits1References1
CNNVD
CNNVD
β€’added 2025/07/04 12:00 a.m.β€’21 views

NetAlertX security vulnerability

NetAlertX is a network intruder and presence detector from the individual developer of jokob-sk. A security vulnerability exists in NetAlertX versions prior to 25.6.7, which stems from a SHA-256 magic hash authentication bypass that could lead to login bypass...

9.4CVSS8.1AI score0.00595EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
β€’added 2025/06/07 12:00 a.m.β€’20 views

PT-2025-28025 Β· Netalertx Β· Netalertx

Name of the Vulnerable Software and Affected Versions: NetAlertX versions prior to 25.6.7 Description: NetAlertX is a network, presence scanner, and alert framework. A vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes due to a loose...

9.4CVSS8.1AI score0.00595EPSS
SaveExploits1References16
RedhatCVE
RedhatCVE
β€’added 2025/05/29 10:49 p.m.β€’44 views

CVE-2025-32440

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...

10CVSS5.7AI score0.00604EPSS
SaveExploits1References1
NVD
NVD
β€’added 2025/05/27 10:15 p.m.β€’34 views

CVE-2025-32440

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...

10CVSS0.00604EPSS
SaveExploits1References2
osv_cve
osv_cve
β€’added 2025/05/27 9:59 p.m.β€’20 views

CVE-2025-32440 NetAlertX Vulnerable to Authentication Bypass

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...

10CVSS7AI score
SaveExploits0References4
Rows per page
Query Builder