CIRCLE WITH A DOT

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

LibreNMS code exec via abuse of WHOIS functionality (requires admin access on the web UI):

1 Posts 1 Posters 0 Views

D This user is from outside of this forum
D This user is from outside of this forum
da_667@infosec.exchange

wrote last edited by

#1

LibreNMS code exec via abuse of WHOIS functionality (requires admin access on the web UI):

LibreNMS < 26.3.0 Authenticated RCE & XSS

By searching for unsafe patterns and function calls, we discovered authenticated XSS and RCE vulnerabilities in LibreNMS.

Research Blog | Project Black (projectblack.io)

#internetofshit #okayItsNotAnIOTDevceButItsStillShit
1 Reply Last reply
1
0
R relay@relay.infosec.exchange shared this topic

Log in to reply