🚨 CVE-2020-37197
Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.
🎖@cveNotify
Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37199
NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
🎖@cveNotify
NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37200
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the application by supplying oversized input. Attackers can generate a 1000-character payload and paste it into the registration key field to trigger an application crash.
🎖@cveNotify
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the application by supplying oversized input. Attackers can generate a 1000-character payload and paste it into the registration key field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37201
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
🎖@cveNotify
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37204
RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.
🎖@cveNotify
RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37205
RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.
🎖@cveNotify
RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37206
ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field.
🎖@cveNotify
ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37207
SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
🎖@cveNotify
SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37208
SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service.
🎖@cveNotify
SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37209
SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.
🎖@cveNotify
SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37210
SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
🎖@cveNotify
SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37211
SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
🎖@cveNotify
SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2020-37212
SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
🎖@cveNotify
SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2019-25434
SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.
🎖@cveNotify
SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.
🎖@cveNotify
NSAuditor
Network Security Audit Software — AI Scanner | NSAuditor
AI-powered network security audit software. Verified vulnerabilities, MITRE ATT&CK mapping, and SOC 2 / HIPAA / PCI DSS / ISO 27001 / CIS evidence — on your own infrastructure. Free download.
🚨 CVE-2025-71324
Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.
🎖@cveNotify
Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.
🎖@cveNotify
GitHub
Arbitrary File Read
### Summary
An arbitrary file read vulnerability in the `chatId` parameter supplied to both the `/api/v1/get-upload-file` and `/api/v1/openai-assistants-file/download` endpoints allows unauthentic...
An arbitrary file read vulnerability in the `chatId` parameter supplied to both the `/api/v1/get-upload-file` and `/api/v1/openai-assistants-file/download` endpoints allows unauthentic...
🚨 CVE-2025-71327
Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authenticate to the system, gaining full API access without credentials.
🎖@cveNotify
Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authenticate to the system, gaining full API access without credentials.
🎖@cveNotify
GitHub
Authentication Bypass Using Unprotected Registration Endpoint (/register)
### Summary
An unauthenticated attacker can exploit the unprotected registration endpoint (/register) to create a new user and bypass authentication .
### Details
Critical vulnerability in Flowi...
An unauthenticated attacker can exploit the unprotected registration endpoint (/register) to create a new user and bypass authentication .
### Details
Critical vulnerability in Flowi...
🚨 CVE-2026-40080
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Redirect through a substring check rather than a host check at str_contains($referer, CACTI_PATH_URL). When the user's login_opts == '1' (redirect to referer after login), the function used $_SERVER['HTTP_REFERER'] directly. An attacker could craft a referer such as https://evil.com/cacti/. Where CACTI_PATH_URL is /cacti/, the substring matches and the user is redirected to evil.com after login. The pre-existing validate_redirect_url() helper at lib/html_utility.php performed proper validation but was not invoked from auth_login_redirect(). This issue has been fixed in version 1.2.31.
🎖@cveNotify
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Redirect through a substring check rather than a host check at str_contains($referer, CACTI_PATH_URL). When the user's login_opts == '1' (redirect to referer after login), the function used $_SERVER['HTTP_REFERER'] directly. An attacker could craft a referer such as https://evil.com/cacti/. Where CACTI_PATH_URL is /cacti/, the substring matches and the user is redirected to evil.com after login. The pre-existing validate_redirect_url() helper at lib/html_utility.php performed proper validation but was not invoked from auth_login_redirect(). This issue has been fixed in version 1.2.31.
🎖@cveNotify
GitHub
Release v1.2.31 · Cacti/cacti
Release of Cacti 1.2.31
Thank you everyone who are using Cacti and especially those helping to make Cacti better!
For additional details check out the README located on GitHub.
Project Updates
This...
Thank you everyone who are using Cacti and especially those helping to make Cacti better!
For additional details check out the README located on GitHub.
Project Updates
This...
🚨 CVE-2026-40082
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing session_regenerate_id() after login, leading to Session Fixation. session_regenerate_id() is NOT called after successful login. The login flow at auth_login.php:203-207 directly sets $_SESSION[SESS_USER_ID] without rotating the session ID. The session cookie configuration is otherwise good (httponly=true, samesite=Strict, secure=true for HTTPS at include/global.php:513-537), but these do not prevent session fixation via same-site vectors. This issue has been fixed in version 1.2.31.
🎖@cveNotify
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing session_regenerate_id() after login, leading to Session Fixation. session_regenerate_id() is NOT called after successful login. The login flow at auth_login.php:203-207 directly sets $_SESSION[SESS_USER_ID] without rotating the session ID. The session cookie configuration is otherwise good (httponly=true, samesite=Strict, secure=true for HTTPS at include/global.php:513-537), but these do not prevent session fixation via same-site vectors. This issue has been fixed in version 1.2.31.
🎖@cveNotify
GitHub
fix(auth): use cacti_cookie_session_set in cacti_auth_transition (#7093) · Cacti/cacti@2fa404e
* fix(auth): use cacti_cookie_session_set in cacti_auth_transition
cacti_cookie_set() sets a 1-hour expiry and skips the
$_SESSION['cacti_remembers'] flag; cacti_cookie_session_set...
cacti_cookie_set() sets a 1-hour expiry and skips the
$_SESSION['cacti_remembers'] flag; cacti_cookie_session_set...
🚨 CVE-2026-40083
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through unsanitized unserialize+implode in managers.php. At line 756 of managers.php, the application assigns $selected_items by calling cacti_unserialize(stripslashes(gnrv('selected_graphs_array'))). The cacti_unserialize() function calls unserialize() with allowed_classes set to false, which prevents object injection but still allows arbitrary string arrays to be deserialized. Then, at lines 760 to 766, the deserialized array values are passed directly into db_execute('DELETE FROM snmpagent_managers WHERE id IN (' . implode(',', $selected_items) . ')'), where they are imploded into the SQL statement without any integer validation, resulting in SQL Injection when using SNMP agent management permissions. This issue has been fixed in version 1.2.31.
🎖@cveNotify
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through unsanitized unserialize+implode in managers.php. At line 756 of managers.php, the application assigns $selected_items by calling cacti_unserialize(stripslashes(gnrv('selected_graphs_array'))). The cacti_unserialize() function calls unserialize() with allowed_classes set to false, which prevents object injection but still allows arbitrary string arrays to be deserialized. Then, at lines 760 to 766, the deserialized array values are passed directly into db_execute('DELETE FROM snmpagent_managers WHERE id IN (' . implode(',', $selected_items) . ')'), where they are imploded into the SQL statement without any integer validation, resulting in SQL Injection when using SNMP agent management permissions. This issue has been fixed in version 1.2.31.
🎖@cveNotify
GitHub
Release v1.2.31 · Cacti/cacti
Release of Cacti 1.2.31
Thank you everyone who are using Cacti and especially those helping to make Cacti better!
For additional details check out the README located on GitHub.
Project Updates
This...
Thank you everyone who are using Cacti and especially those helping to make Cacti better!
For additional details check out the README located on GitHub.
Project Updates
This...
🚨 CVE-2026-40084
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal through the Report format_file Parameter, causing arbitrary file read. This vulnerability occurs in two stages. In the first stage (stored injection), lib/html_reports.php at line 283 stores $save['format_file'] = $post['format_file'] directly into the database without any validation. In the second stage (file read), lib/reports.php at line 667 concatenates CACTI_PATH_FORMATS . '/' . $format_file, and line 670 then calls file($format_file), reading arbitrary files from the filesystem. This issue has been fixed in version 1.2.31.
🎖@cveNotify
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal through the Report format_file Parameter, causing arbitrary file read. This vulnerability occurs in two stages. In the first stage (stored injection), lib/html_reports.php at line 283 stores $save['format_file'] = $post['format_file'] directly into the database without any validation. In the second stage (file read), lib/reports.php at line 667 concatenates CACTI_PATH_FORMATS . '/' . $format_file, and line 670 then calls file($format_file), reading arbitrary files from the filesystem. This issue has been fixed in version 1.2.31.
🎖@cveNotify
GitHub
security: consolidated defense-in-depth hardening (1.2.x) (#7039) · Cacti/cacti@4c09efa
Cacti ™. Contribute to Cacti/cacti development by creating an account on GitHub.
🚨 CVE-2026-40941
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31.
🎖@cveNotify
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31.
🎖@cveNotify
GitHub
feat(security): architectural security helpers — eliminate vulnerability classes at root by somethingwithproof · Pull Request #7054…
Summary
Nine security architecture items adding centralized gateways and hardening helpers to reduce attack surface across shell execution, HTTP fetch, LDAP, request handling, action dispatch, XSS ...
Nine security architecture items adding centralized gateways and hardening helpers to reduce attack surface across shell execution, HTTP fetch, LDAP, request handling, action dispatch, XSS ...