3742 matches found
CVE-2026-2042 Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability
Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
Nagios XI 操作系统命令注入漏洞
Nagios XI is a IT infrastructure monitoring solution developed by the American company Nagios. This solution supports monitoring and early alerts for applications, services, operating systems, etc. Nagios XI has a vulnerability related to operating system command injection. This vulnerability ste...
Nagios XI 操作系统命令注入漏洞
Nagios XI is a IT infrastructure monitoring solution developed by the American company Nagios. This solution supports monitoring and early alerts for applications, services, operating systems, etc. Nagios XI has a vulnerability related to operating system command injection. This vulnerability ste...
Nagios XI 操作系统命令注入漏洞
Nagios XI is a IT infrastructure monitoring solution developed by the American company Nagios. This solution supports monitoring and early warning of applications, services, operating systems, etc. Nagios XI has a vulnerability related to operating system command injection. This vulnerability ste...
Nagios XI < 2026R1.0.1 Multiple Vulnerabilities
According to the self-reported version of Nagios XI, the remote host is affected by multiple vulnerabilities, including the following: - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this...
Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability. The specific flaw exists within the esensorswebsensorconfigwizardfunc method. The issue results from the lack of proper validati...
PT-2026-7951
Name of the Vulnerable Software and Affected Versions Nagios Host affected versions not specified Description A flaw exists within the zabbixagent configwizard func method that allows remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this...
PT-2026-7952
Name of the Vulnerable Software and Affected Versions Nagios Host affected versions not specified Description A flaw exists within the monitoringwizard module that allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required for...
Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability. The specific flaw exists within the zabbixagentconfigwizardfunc method. The issue results from the lack of proper validation of ...
Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability. The specific flaw exists within the monitoringwizard module. The issue results from the lack of proper validation of a...
PT-2026-7953
Name of the Vulnerable Software and Affected Versions Nagios Host affected versions not specified Description A flaw exists within the esensors websensor configwizard func method that allows remote attackers to execute arbitrary code on affected installations. Authentication is required to exploi...
📄 Nagios XI Monitoring Wizard Command Injection
Nagios XI is a widely used enterprise monitoring solution. A vulnerability exists within the Monitoring Wizard configuration page where the database parameter is unsafely passed into backend operations. Authenticated users can exploit this to execute arbitrary system commands, allowing full remot...
CVE-2023-40934
A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage host escalations in the Core Configuration Manager to execute arbitrary SQL commands via the host escalation notification settings...
CVE-2023-40932
A Cross-site scripting XSS vulnerability in Nagios XI version 5.11.1 and below allows authenticated attackers with access to the custom logo component to inject arbitrary javascript or HTML via the alt-text field. This affects all pages containing the navbar including the login page which means t...
CVE-2023-40933
A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute arbitrary SQL commands via the ID parameter sent to the updatebannermessage function...
CVE-2018-12501
Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...
CVE-2021-33177
The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation requires the malicious actor to be authenticated to the vulnerable system, but once authenticated they would be able to execute arbitrary sql queries...
CVE-2021-33179
The general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated reflected cross-site scripting. An authenticated victim, who accesses a specially crafted malicious URL, would unknowingly execute the attached payload...