3749 matches found
Nagios XI Network Monitor Graph Explorer Component Command Injection
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Nagios XI Network...
Nagios XI Network Monitor Graph Explorer Component Command Injection
Exploit for unix platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Nagios XI Network Monitor Graph Explorer Component - Command Injection (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Nagios XI Network...
NGS000194 Technical Advisory: Nagios XI Network Monitor Blind SQL Injection
======= Summary ======= Name: Nagios XI Network Monitor - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00194 Discoverer: Daniel Compton [email protected] Vendor: Nagios Vendor Reference: 0000282 Systems Affected: Nagios XI Network Monitor 2011R1.9 Risk: High Status:...
Nagios XI Network Monitor 2011R1.9 SQL Injection
======= Summary ======= Name: Nagios XI Network Monitor - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00194 Discoverer: Daniel Compton Vendor: Nagios Vendor Reference: 0000282 Systems Affected: Nagios XI Network Monitor 2011R1.9 Risk: High Status: Published ======== TimeLine...
Nagios XI Network Monitor Graph Explorer Component Command Injection
This module exploits a vulnerability found in Nagios XI Network Monitor's component 'Graph Explorer'. An authenticated user can execute system commands by injecting it in several parameters, such as in visApi.php's 'host' parameter, which results in remote code execution. Module Options msf use...
Nagios XI Network Monitor 2011R1.9 SQL Injection Vulnerability
Nagios XI Network Monitor version 2011R1.9 suffers from a remote blind SQL injection vulnerability. ======= Summary ======= Name: Nagios XI Network Monitor - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00194 Discoverer: Daniel Compton Vendor: Nagios Vendor Reference: 0000282...
Nagios XI Network Monitor 2011R1.9 OS Command Injection
======= Summary ======= Name: Nagios XI Network Monitor - OS Command Injection Release Date: 30 November 2012 Reference: NGS00196 Discoverer: Daniel Compton Vendor: Nagios Vendor Reference: 0000283 Systems Affected: Nagios XI Network Monitor 2011R1.9 Risk: High Status: Published ======== TimeLine...
[SECURITY] Fedora 18 Update: pnp4nagios-0.6.16-4.fc18
PNP is an addon to nagios which analyzes performance data provided by plugi ns and stores them automatically into RRD-databases...
Fedora Update for pnp4nagios FEDORA-2012-13244
Check for the Version of pnp4nagios OpenVAS Vulnerability Test Fedora Update for pnp4nagios FEDORA-2012-13244 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
[SECURITY] Fedora 17 Update: pnp4nagios-0.6.16-4.fc17
PNP is an addon to nagios which analyzes performance data provided by plugi ns and stores them automatically into RRD-databases...
Nagios XI < 2011R1.9 login.php XSS
The version of Nagios XI hosted on the remote web server fails to properly sanitize input to the login.php script. An attacker can leverage this issue by enticing a user to follow a malicious URL, causing attacker-specified script code to run inside the user's browser in the context of the affect...
Nagios XI < 2011R1.9 Multiple Vulnerabilities
The version of Nagios XI hosted on the remote web server is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists in the method used to install RPMs. - A privilege escalation vulnerability exists in the method used to edit crontab files. - Multiple reflective...
Nagios XI < 2011R3.0 Multiple XSS Vulnerabilities
The version of Nagios XI hosted on the remote web server fails to properly sanitize input to multiple web pages. - A cross-site scripting vulnerability exists in the 'view' parameter of the 'perfgraphs/index.php' script. - A cross-site scripting vulnerability exists in the 'div' parameter of the...
NGS00195 Patch Notification: Nagios XI Network Monitor Stored and Reflected XSS
High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor Stored and Reflected XSS Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of...
NGS00194 Patch Notification: Nagios XI Network Monitor Blind SQL Injection
High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor Blind SQL Injection Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of the...
NGS00196 Patch Notification: Nagios XI Network Monitor OS Command Injection
High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor OS Command Injection Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of the...
Nagios XI不明细节命令注入漏洞
BUGTRAQ ID: 54263 Nagios是一款免费开放源代码的主机和服务监视软件，可使用在多种Linux和Unix操作系统下。 Nagios XI在过滤用户提供的输入时存在安全漏洞，攻击者可利用此漏洞在网络服务器进程中执行任意命令，导致控制应用和下层系统。 0 Nagios XI 厂商补丁： Nagios ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.nagios.org/...
Nagios XI跨站脚本执行和HTML注入漏洞
BUGTRAQ ID: 54262 Nagios是一款免费开放源代码的主机和服务监视软件，可使用在多种Linux和Unix操作系统下。 Nagios XI 2011R1.9在过滤用户提供的输入时存在安全漏洞，攻击者可利用此漏洞在受影响浏览器中执行HTML和脚本代码，窃取Cookie身份验证凭证或控制站点外观。 0 Nagios XI 2011R1.9 Nagios XI 厂商补丁： Nagios ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.nagios.org/...
0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R3.0
================ 0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI 2011R3.0 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ Multiple reflected XSS vulnerabilities exist within Nagios XI 2011R3....