3757 matches found
Nagios XI Chained Remote Code Execution Exploit
This Metasploit module exploits a few different vulnerabilities in Nagios XI 5.2.6-5.4.12 to gain remote root access. The steps are: 1. Issue a POST request to /nagiosql/admin/settings.php which sets the database user to root. 2. SQLi on /nagiosql/admin/helpedit.php allows us to enumerate API key...
link.nagios.de XSS vulnerability
Open Bug Bounty ID: OBB-638523 Description| Value ---|--- Affected Website:| link.nagios.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Nagios XI Chained Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Nagios XI Chained Remote Code Execution', 'Description' = %q This module exploits a few different vulnerabilities in Nagios XI 5.2.6-5.4.12 to ga...
SUSE SLES11 Security Update : nagios-nrpe (SUSE-SU-2018:1768-1) (Logjam)
This update for nagios-nrpe fixes one issue. This security issue was fixed : - CVE-2015-4000: Prevent Logjam. The TLS protocol 1.2 and earlier, when a DHEEXPORT ciphersuite is enabled on a server but not on a client, did not properly convey a DHEEXPORT choice, which allowed man-in-the-middle...
SUSE-SU-2018:1768-1 Security update for nagios-nrpe
This update for nagios-nrpe fixes one issue. This security issue was fixed: - CVE-2015-4000: Prevent Logjam. The TLS protocol 1.2 and earlier, when a DHEEXPORT ciphersuite is enabled on a server but not on a client, did not properly convey a DHEEXPORT choice, which allowed man-in-the-middle...
Security Bulletin: Vulnerabilities in nagios affect PowerKVM
Summary PowerKVM is affected by vulnerabilities in magios. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-14312 DESCRIPTION: Nagios Core could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the nagios.cfg. By...
Security Bulletin: A vulnerability in nagios affects PowerKVM
Summary PowerKVM is affected by a vulnerability in nagios. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-9565 DESCRIPTION: Nagios Core could allow a remote attacker to execute arbitrary command on the system, caused by an error in the RSS feed reader component. B...
Security Bulletin: Vulnerabilities in nagios affect PowerKVM
Summary PowerKVM is affected by numerous vulnerabilities in nagios. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-5008 DESCRIPTION: Snoopy could allow a remote attacker to execute arbitrary commands on the system, caused by an incomplete fix related to the use of...
Security Bulletin: A vulnerability in NRPE affects PowerKVM (CVE-2014-2913)
Summary PowerKVM is affected by a vulnerability in the Nagios Remote Plugin Executor NRPE. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2014-2913 DESCRIPTION: Nagios Remote Plugin Executor NRPE could allow a remote attacker to execute arbitrary code on the system,...
Nagios Fusion < 4.1.4 Multiple XSS Vulnerabilities
Nagios Fusion is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Nagios Fusion Detection (HTTP)
HTTP based detection of Nagios Fusion. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.813251";...
CVE-2018-12501
Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...
CVE-2018-12501
Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...
Session fixation
Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...
CVE-2018-12501
Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...
CVE-2018-12501
Nagios Fusion prior to 4.1.4 is affected by a cross-site scripting (XSS) vulnerability (CVE-2018-12501) in the web interface. The issue, also referred to as TPS#13332-13335, is documented across multiple sources (Red Hat, CNVD, NVD, CVE lists). The vulnerability arises in Nagios Fusion’s handling...
Nagios XI admin/commandline.php SQL Injection Vulnerability
Nagios is an open source, free network monitoring tool that effectively monitors the status of hosts, switches routers and other network devices, printers, etc. for Windows, Linux and Unix. Nagios XI 5.4.12 and earlier versions of admin/commandline.php cname parameter contains a SQL injection...
CVE-2018-10736
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter...
