1012 matches found
exploit-CVE-2020-5844
Exploit per CVE-2020-5844 Pandora FMS v7.0NG.742 - Esecuzione di codice remoto Ti piace questo repository? Dacci una ⭐! Solo per scopi educativi e di ricerca sulla sicurezza autorizzati. Autore dell'Exploit @UNICORDev di @NicPWNs e @Dev-Yeoj Descrizione della Vulnerabilità...
Pandora FMS <=7.0NG.722 - Remote Code Execution
Pandora FMS versions =7.0NG.722 are vulnerable to unauthenticated remote code execution by chaining an unrestricted file upload CVE-2018-11221 and a local file inclusion CVE-2018-11222. An attacker can upload a malicious PHP file as a plugin and execute it via LFI, leading to full compromise of t...
CVE-2024-11320
CVE-2024-11320 Pandora FMS दूरस्थ कोड निष्पादन CVE-2024-11320 के लिए शोषण...
CVE-2021-32099
CVE-2021-32099 PoC Questo repository fornisce un exploit Proof of Concept PoC per la vulnerabilità CVE-2021-32099 , che colpisce Pandora FMS 742. L'exploit mostra come un attaccante non autenticato possa sfruttare una vulnerabilità di SQL injection per elevare una sessione non privilegiata a un...
CVE-2021-32099_SQLi
CVE-2021-32099 SQLi Login-Bypass Nützlich, um die User Flag auf Pandora.htb zu lesen CVE-2021-32099 SQLi erlaubt es einem Angreifer, den Login zu umgehen. Ziel Exploit auf: Pandora FMS v7.0NG.742FIXPERL2020 Analyse Gelesen von cvedetail. Wir kennen den Endpunkt des Ziels:...
CVE-2021-32099
CVE-2021-32099 CVE-2021-32099 POC : http://localhost:8000/pandoraconsole/include/chartgenerator.php?sessionid=a%27%20UNION%20SELECT%20%27a%27,1,%27idusuario|s:5:%22admin%22;%27%20as%20data%20FROM%20tsessionsphp%20WHERE%20%271%27=%271 Dettaglio :...
CVE-2021-32099
CVE-2021-32099 pandora fms 742 sqli pre autenticazione POC root@kitploit: http://localhost/pandoraconsole/include/chartgenerator.php?sessionid=a' UNION SELECT 'a',1,'idusuario|s:5:"admin";' as data FROM tsessionsphp WHERE '1'='1 URL Encoded root@kitploit:...
CVE-2022-45436
CVE-2022-45436 Cross-Site Scripting riflesso che porta al dirottamento della sessione in pandorafms Titolo dell'exploit: Cross-Site Scripting riflesso Data: 15/02/2023 Autore dell'exploit: Damodar Naik Homepage del fornitore: https://pandorafms.com/en/ Link del software:...
CVE-2021-32099
poc : http://127.0.0.1:8888/pandoraconsole/include/chartgenerator.php?sessionid=%27%20union%20SELECT%201,2,%27idusuario|s:5:%22admin%22;%27%20as%20data%20--%20SgGO https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained...
pandorafms_7.44
Pandora FMS 7.44 CVE-2020-13851 Pandora FMS 7.44 CVE-2020-13851 RCE consente a un utente autenticato di ottenere l'esecuzione remota di comandi tramite la funzionalità degli eventi. Può essere sfruttato con credenziali o con un cookie di sessione PHP. Per Iniziare Esecuzione del programma...
CVE-2026-75531 Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora
Pandora contains a stored cross-site scripting XSS vulnerability in the rendering of URL observables. A URL extracted from or associated with an analyzed file was inserted directly into the inline JavaScript onclick handler used by the Submit to Lookyloo action. Although the value was subject to...
CVE-2026-34187
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-30810
Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-30807
Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-30805
Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...
EUVD-2026-29512
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800...
EUVD-2026-29494
Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...
EUVD-2026-29495
Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: from 777 through 800...