3758 matches found
CVE-2019-15898
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page...
Cross site scripting
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page...
CVE-2019-15898
Nagios Log Server prior to 2.0.8 is affected by a reflected XSS vulnerability on the login page via the username field. The issue is confirmed across multiple sources (NVD/Red Hat entry). No explicit remediation steps or patch details are described in the provided documents beyond noting the affe...
CVE-2019-15898
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page...
Exploit for OS Command Injection in Nagios Nagios_Xi
nagiosxi-root-exploit Overview A vulnerability exists in...
Nagios XI 5.6.5 - Remote Code Execution / Root Privilege Escalation
?php / A vulnerability exists in Nagios XI = 5.6.5 allowing an attacker to leverage an RCE to escalate privileges to root. The exploit requires access to the server as the 'nagios' user, or CCM access via the web interface with perissions to manage plugins. The getprofile.sh script, invoked by...
Nagios XI Prior to 5.6.6 getprofile.sh Authenticated Remote Command Execution
This module exploits a vulnerability in the getprofile.sh script of Nagios XI prior to 5.6.6 in order to upload a malicious checkping plugin and thereby execute arbitrary commands. For Nagios XI 5.2.0-5.4.13, the commands are run as the nagios user. For versions 5.5.0-5.6.5 the commands are run a...
PT-2019-6111 · Nagios · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.6.6 Description: The issue allows remote command execution as root. It requires access to the server as the nagios user or access as the admin user via the web interface. The getprofile.sh script is executed as...
Nagios XI Cross-Site Scripting Vulnerability (CNVD-2019-23522)
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A cross-site scripting vulnerability exists in the Auto-Login administrator management page in Nagios XI...
CVE-2018-17147
Nagios XI before 5.5.4 has XSS in the auto login admin management page...
CVE-2018-17147
Nagios XI before 5.5.4 has XSS in the auto login admin management page...
CVE-2018-17147
Nagios XI before 5.5.4 has XSS in the auto login admin management page...
Code injection
Nagios XI before 5.5.4 has XSS in the auto login admin management page...
CVE-2018-17147
Nagios XI before 5.5.4 has XSS in the auto login admin management page...
CVE-2018-17147
Nagios XI prior to version 5.5.4 contains a Cross-Site Scripting (XSS) vulnerability in the Auto-Login administrator management page. The root cause is described as insufficient validation of client-side data in the web application. Impact details in the provided sources indicate client-side code...
CVE-2018-17148
An Insufficient Access Control vulnerability leading to credential disclosure in coreconfigsnapshot.php aka configuration snapshot page in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials...
CVE-2018-17146
A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page. Exploitation of this vulnerability allows an attacker to execute arbitrary JavaScript code within the auto login admin management page...
SuperMicro SuperDoctor Arbitrary Code Execution Vulnerability
SuperMicro SuperDoctor is a set of server management monitoring platform from SuperMicro, Inc. in the United States. The platform is mainly used for real-time monitoring of the target node hardware in the data center system operation status or availability. A security vulnerability exists in Supe...
Nagios XI Magpie_debug.php Root Remote Code Execution Exploit
This Metasploit module exploits two vulnerabilities in Nagios XI 5.5.6. One allows for unauthenticated remote code execution and another allows for local privilege escalation. When combined, these two vulnerabilities give us a root reverse shell. This module requires Metasploit:...
Nagios XI 5.5.6 - Magpie_debug.php Root Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Nagios XI Magpiedebug.php Root Remote Code Execution", 'Description' = %q This module exploits two vulnerabilities in Nagios XI 5.5.6:...