Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-20434 PoC — LibreNMS 操作系统命令注入漏洞

Source
https://github.com/mhaskar/CVE-2018-20434
Associated Vulnerability
Title:LibreNMS 操作系统命令注入漏洞 (CVE-2018-20434)
Description:LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling.
Description
The official exploit code for LibreNMS v1.46 Remote Code Execution CVE-2018-20434
File Snapshot

 [4.0K]  /data/pocs/182ed5b89aeee0e3c665cccb3ab413ebab6c761f
└── [2.6K]  LibreNMS-exploit.py

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →