Sharpe-nl

9 exploits Active since Aug 2023
CVE-2023-33468 WRITEUP CRITICAL WRITEUP
KramerAV VIA Connect/VIA Go <4.0.1.1326 - RCE
KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.
CVSS 9.1
CVE-2023-33469 WRITEUP HIGH WRITEUP
KramerAV VIA Connect/VIA Go <4.0.1.1326 - RCE
In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level.
CVSS 7.8
CVE-2024-43024 WRITEUP MEDIUM WRITEUP
RWS MultiTrans < 7.0.23324.2 - Stored Cross-Site Scripting
Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS 6.1
CVE-2024-43025 WRITEUP MEDIUM WRITEUP
RWS MultiTrans < 7.0.23324.2 - HTML Injection via Crafted Email Payload
An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail.
CVSS 6.1
CVE-2024-54957 WRITEUP MEDIUM WRITEUP
Nagios XI 2024R1.2.2 - Open Redirect via Tools Page
Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only permissions. This vulnerability allows an attacker to craft a malicious link that redirects users to an arbitrary external URL without their consent.
CVSS 6.1
CVE-2024-54958 WRITEUP MEDIUM WRITEUP
Nagios XI 2024R1.2.2 - Stored Cross-Site Scripting in Tools Page
Nagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability in the Tools page. This flaw allows an attacker to inject malicious scripts into the Tools interface, which are then stored and executed in the context of other users accessing the page.
CVSS 6.1
CVE-2024-54959 WRITEUP MEDIUM WRITEUP
Nagios XI 2024R1.2.2 - Cross-Site Request Forgery and Cross-Site Scripting via Favorites Component
Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the Favorites component, enabling POST-based Cross-Site Scripting (XSS).
CVSS 6.1
CVE-2024-54960 WRITEUP MEDIUM WRITEUP
Nagios XI 2024R1.2.2 - SQL Injection via History Tab Component
A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the History Tab component.
CVSS 6.5
CVE-2024-54961 WRITEUP MEDIUM WRITEUP
Nagios XI 2024R1.2.2 - Unauthenticated Exposure of Sensitive User Information
Nagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated users to access multiple pages displaying the usernames and email addresses of all current users.
CVSS 6.5