PRTG Network Monitor < 21.3.69.1333 XSS Vulnerability

PRTG Network Monitor is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Weak Password Vulnerability in PRTG Network Monitor

PRTG Network Monitor is a computer network monitor that can monitor network computers, routers, switches, firewalls, database servers and more. PRTG Network Monitor suffers from a weak password vulnerability, which can be exploited by attackers to log in to the backend and obtain sensitive...

PRTG Network Monitor < 22.1.74 CSRF Vulnerability

PRTG Network Monitor is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

PRTG Network Monitor < 21.1.66.1623 Information Disclosure Vulnerability

PRTG Network Monitor is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

Cross site request forgery (csrf)

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-34547

CVE-2021-34547 affects Paessler PRTG Network Monitor (version 20.1.55.1775) and is a CSRF flaw in the /editsettings endpoint that can lead to unintended user-creation actions. The description explicitly states a cross-site request forgery vulnerability in the web application, enabling an attacker...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-27220

An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepared context paths, an attacker is able to verify the existence of certain files on the filesystem of the PRTG's Web server...

CVE-2021-27220

An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepared context paths, an attacker is able to verify the existence of certain files on the filesystem of the PRTG's Web server...

CVE-2021-27220

An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepared context paths, an attacker is able to verify the existence of certain files on the filesystem of the PRTG's Web server...

CVE-2021-27220

An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepared context paths, an attacker is able to verify the existence of certain files on the filesystem of the PRTG's Web server...

CVE-2021-27220

PRTG Network Monitor before 21.1.66.1623 is affected by an information disclosure vulnerability: invoking the screenshot function with prepared context paths can cause verification of certain files on the web server filesystem. Root cause is excessive disclosure via the screenshot feature. Impact...

Paessler PRTG Network Monitor 安全漏洞

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler, Germany. A security vulnerability exists in PRTG Network Monitor before 21.1.66.1623, which can be exploited by an attacker to invoke the screenshot function by using a prepared context path...

PRTG Network Monitor 7.x - 22.1.75.1569 XSS Vulnerability

PRTG Network Monitor is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

PRTG Network Monitor < 20.1.57.1745 Information Disclosure (direct check)

Binary data prtgcve202011547.nbin...

PRTG Network Monitor Remote Code Execution (CVE-2018-9276)

A remote code execution vulnerability exists in PRTG Network Monitor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Metasploit Wrap-Up

MobileIron MDM Hessian-Based Java Deserialization RCE Our very own wvu-r7 has added exploits/linux/http/mobileironmdmhessianrce, which exploits an ACL bypass in MobileIron MDM products to execute a Java deserialization attack using a Groovy gadget against a Hessian based endpoint. CVE-2020-15505...