SQL Injection in Graph Container Parameter

Command Injection in Netflow path

Remote Code Execution leads to Command Injection

Insecure Default Initialization in API Authentication leads to Authentication Bypass

Server-Side Request Forgery in API Checker leads to Privilege Escalation

Cross-Site Request Forgery on Extension Pages

SQL Injection in Custom Fields leads to Database Compromise

SQL Injection in Module Search leads to Database Compromise

OS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code Execution

OS Command Injection in Network Report leads to Remote Code Execution

QuickShell Authenticated Command Injection

Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager

Stored Cross-Site Scripting via Directory Name in File Manager Create Directory

Session Fixation in Authentication leads to Session Hijacking

CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager

CSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File Manager

SQL Injection in Grafana Integration Endpoint (query.php)

OS Command Injection in Event Response Execution

Unrestricted File Upload in Extension Uploader leads to Remote Code Execution

Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure

Missing Authorization in Configuration Ajax Endpoint leads to Information Disclosure

CSRF in Alert Command Deletion

CSRF in Event Response Deletion

Stored Cross-Site Scripting in Event Comments via Filter Bypass