Disclosure records connected to original vulnerability research. The Research article remains the detailed technical record; CVEs, vendor bulletins and security advisories document the public disclosure trail.
Authenticated OS command injection in Centreon Infra Monitoring through the broker reload command, allowing a high-privileged web user to execute commands when the broker reload path is triggered.
Open research →Authenticated OS command injection in Pandora ITSM through the chromium_path configuration value, triggered when report or chart content is exported to PDF.
Open research →Authenticated OS command injection in Pandora ITSM through the backup name field, allowing an administrator to execute arbitrary commands when a backup is created.
Open research →