CVE-2018-20434

This exploit leverages an authenticated RCE vulnerability in LibreNMS v1.46 by injecting a reverse shell payload into the SNMP community field during device creation. The payload is executed when the application processes the SNMP walk request.

This Metasploit module exploits a command injection vulnerability in LibreNMS by injecting arbitrary commands via the unsanitized 'community' parameter in the addhost functionality. It authenticates, adds a device with a malicious payload, triggers the payload, and cleans up by deleting the device.

This exploit leverages an authenticated RCE vulnerability in LibreNMS v1.46 by injecting a reverse shell payload into the SNMP community field during device creation. The payload is executed when the application processes the device via an AJAX request.

This Metasploit module exploits a command injection vulnerability in LibreNMS by injecting arbitrary commands via the 'community' parameter in the addhost functionality. It authenticates, adds a device with a malicious payload, triggers the payload execution, and cleans up by deleting the device.