CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
|
Description: XSS on the parameters:/addhost -> param: community
of Librenms versions 24.10.1 (https://github.com/librenms/librenms) allows remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure.
Proof of Concept:
Navigate to the /addhost path.
Fill in all required fields.
In the Community field, enter the following payload: "><img src=a onerror="alert(1)">.
Submit the form to save changes.
5 The script will execute when the error alert "No reply with community + payload" appears.
Impact:
Execution of Malicious Code
References
https://github.com/librenms/librenms/security/advisories/GHSA-g84x-g96g-rcjc
https://github.com/advisories/GHSA-g84x-g96g-rcjc
January 16th, 2025 (6 months ago)
|
|
|
Description: Days before leaving office, President Joe Biden signed an executive order to shore up the United States' cybersecurity by making it easier to sanction hacking groups targeting federal agencies and the nation's critical infrastructure. [...]
January 16th, 2025 (6 months ago)
|
|
|
January 16th, 2025 (6 months ago)
|
|
|
Description: 888 Has Allegedly Leaked the Data of NetSE
January 16th, 2025 (6 months ago)
|
|
|
Description: A TikTok ban is a massive prize that Zuckerberg has been laying the groundwork on for years. Will Trump let him have it?
January 16th, 2025 (6 months ago)
|
|
|
Description: A Threat Actor is Selling a Cookies Stealing Google Extension
January 16th, 2025 (6 months ago)
|
|
|
Description: Wolf Haldenstein Adler Freeman & Herz LLP ("Wolf Haldenstein") reports it has suffered a data breach that exposed the personal information of nearly 3.5 million individuals to hackers. [...]
January 16th, 2025 (6 months ago)
|
|
|
Description: The FTC will require web hosting giant GoDaddy to implement basic security protections, such as multi-factor authentication and HTTPS APIs, to settle charges that it failed to secure its hosting services against attacks since 2018. [...]
January 16th, 2025 (6 months ago)
|
|
|
Description: The Nokia Design Archive contains thousands of designs, pitch decks, presentations and prototypes from the turn of the millennium.
January 16th, 2025 (6 months ago)
|
|
|
January 16th, 2025 (6 months ago)
|