CENTREON / AUTHENTICATED CODE EXECUTION
CVE-2019-19699
Research into Centreon’s poller configuration and the permissions around a scheduled task. The advisory describes a path from administrative web access to system compromise.
04 / THE WORKBENCH
Take it apart.
Understand it.
Vulnerability walkthroughs and proofs of concept from the original site. Each entry keeps its original publication date; the linked CVE records provide the current advisory details.
PANDORA FMS / FILE UPLOAD
CVE-2020-5844
A proof of concept for authenticated code execution in Pandora FMS 7.0 NG. The issue involves administrator access to the file repository and execution of an uploaded PHP file.
VULNERABILITY WALKTHROUGH
CVE-2019-19369
Authenticated code execution in FusionPBX through version 4.5.10. The research examines how the PHP editor can modify a server-side page to execute code with the web server’s permissions.
Read the original writeup →VULNERABILITY WALKTHROUGH
CVE-2019-19268
Research with dmw0ng into rConfig 3.9.2. Overly broad sudo permissions let the apache account use system utilities to act as root. The original notes document multiple paths through the misconfiguration.
Read the original writeup →CENTREON / PROOF OF CONCEPT
CVE-2019-16405
Centreon research with a published Ruby proof of concept. The NVD record links to the code, vendor fixes and release notes.