Lucene search
+L

227 matches found

Kitploit
Kitploit
added 2026/09/03 6:32 p.m.4 views

CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure

PRTG-Network-Monitor-Information-Disclosure - CVE-2020-11547 인증되지 않은 원격 사용자는 'type' 매개변수를 제공하여 /public/login.htm 또는 /index.htm에서 HTTP 요청을 조작할 수 있습니다. 예시: http://127.0.0.1/public/login.htm?type=probes probes를 다음 중 하나로 바꾸면 다른 정보를 얻을 수 있습니다. version cpuload dnsname serverhttpurl windowsversion...

5.3CVSS6.1AI score0.52059EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 3:33 p.m.5 views

CVE-2018-9276

CVE-2018-9276 — PRTG Network Monitor ⚠️ 면책 조항: 이 도구는 교육 목적 및 승인된 침투 테스트 전용입니다. 소유하거나 명시적 서면 허가를 받은 시스템에서만 사용하십시오. 허가되지 않은 사용은 불법입니다. 목차 개요 취약점 세부 정보 작동 원리 요구 사항 설치 사용법 예제 완화 조치 참고 자료 개요 PRTG Network Monitor 는 Paessler AG에서 개발한 네트워크 모니터링 도구입니다. 18.2.39 이전 버전은 알림 기능을 통한 인증된 명령어 삽입 취약점에 영향을 받아, 유효한 자...

9CVSS7.2AI score0.87173EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/03 4:08 a.m.5 views

CVE-2018-19410-POC

CVE-2018-19410-POC CVE-2018-19410 の脆弱性の概念実証コード 詳細 PRTG Network Monitor バージョン: 18.2.39.1661 以前 深刻度: 高 影響: 認証バイパス、不適切な認可、ローカルファイルインクルード アクセスベクトル: リモート この脆弱性により、リモートかつ未認証の攻撃者が、管理アクセスを含む読み取り/書き込み権限を持つユーザーを生成できるようになります。これは、/public/login.htm ファイル内の 'include' ディレクティブに含まれる属性を操作して、"/api/addusers"...

9.8CVSS7.4AI score0.97939EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 9:53 a.m.5 views

CVE-2020-23934

CVE-2020-23934 참조 1 https://www.exploit-db.com/exploits/48636 2 https://github.com/vj0shii/PRTG-Network-MonitorCMS-Authenticated-Remote-Code-Execution/blob/master/PRTGCMS.py 3 https://stackoverflow.com/questions/12385179/how-to-send-a-multipart-form-data-with-requests-in-python 4...

9CVSS7.3AI score0.15962EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/02 2:20 a.m.3 views

CVE-2018-9276

CVE-2018-9276 PRTG 18.2.39 인증된 명령 주입 리버스 셸 https://nvd.nist.gov/vuln/detail/CVE-2018-9276 https://github.com/M4LV0이 작성한 익스플로잇의 개선 버전입니다. 저는 그들의 스크립트에서 POST 데이터를 사용했지만, 그걸로는 성공률이 높지 않아 더 신뢰할 수 있게 만들었습니다. 페이로드 전달은 본질적으로 smbdelivery입니다. Impacket은 msfvenom이 생성한 .dll을 제공하며, rundll32.exe가 모든 작업을 수행합니다...

9CVSS7.2AI score0.87173EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/08/28 10:48 p.m.2 views

PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276

Autenticata esecuzione remota di codice in PRTG Network Monitor Basato su https://www.exploit-db.com/exploits/46527 Utilizzo: modifica manualmente lo script per includere l'URL del target, il nome utente admin e la password come segue: root@kitploit: TARGET = "http://10.129.15.52" USER =...

9CVSS7.2AI score0.87173EPSS
SaveExploits12
RedhatCVE
RedhatCVE
added 2026/01/15 12:23 a.m.14 views

CVE-2025-67835

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

6.5CVSS6.8AI score0.00367EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/14 5:16 p.m.9 views

CVE-2025-67834

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter...

5.4CVSS0.00235EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/14 12:00 a.m.8 views

CVE-2025-67833

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter...

6.1AI score0.00235EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/14 12:00 a.m.22 views

PT-2026-2923

Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor versions prior to 25.4.114 Description An authenticated attacker can cause a Denial-of-Service DoS condition through the Notification Contacts functionality. Recommendations Update to version 25.4.114 or later...

6.5CVSS6.5AI score0.00367EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/14 12:00 a.m.3 views

CVE-2025-67834

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter...

5.4CVSS5.4AI score0.00235EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/14 12:00 a.m.20 views

EUVD-2026-2432

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter...

5.4CVSS6AI score0.00235EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/14 12:00 a.m.4 views

CVE-2025-67835

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

6.4AI score0.00367EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/14 12:00 a.m.45 views

CVE-2025-67833

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter...

0.00235EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/14 12:00 a.m.43 views

CVE-2025-67835

CVE-2025-67835 affects Paessler PRTG Network Monitor before 25.4.114. An authenticated attacker can trigger a Denial-of-Service via the Notification Contacts feature, impacting availability. The vulnerability is described consistently across multiple sources (NVD/Red Hat/CNNVD/CVE.org) as a DoS c...

6.5CVSS6.4AI score0.00367EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 12:01 p.m.14 views

CVE-2018-19411

PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account including administrator via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights...

8.8CVSS6.8AI score0.0087EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:59 a.m.13 views

CVE-2018-19203

PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request...

7.5CVSS7AI score0.02805EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:40 a.m.15 views

CVE-2022-35739

PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrary Cascading Style Sheets CSS data is inserted into the style tag, loading...

5.3CVSS6.3AI score0.00763EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:11 a.m.13 views

CVE-2019-11074

A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in arbitrary locations with SYSTEM privileges although not controlling the contents of such files due to insufficient sanitisation when passing arguments to th...

9CVSS6.7AI score0.04544EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:54 a.m.11 views

CVE-2020-10374

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

9.8CVSS7.3AI score0.04667EPSS
SaveExploits0References1
Rows per page
Query Builder