NagiosXI-RCE-all-version-CVE-2021-40345

NagiosXI RCE File-Upload CVE-2021-40345 Da RFI autenticato a RCE per lo sfruttamento di Nagios/NagiosXI Step 1 : Vai alla pagina di gestione dei "dashlets" e scarica uno di loro sto usando "rssdashlet" per l'esempio : root@kitploit: http://TARGETIP/nagiosxi/admin/dashlets.php?download=rssdashlet...

Nagios XI Command Injection (CVE-2021-40345)

A command injection vulnerability exists in Nagios Xi. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-40345

CVE-2021-40345 affects Nagios XI 5.8.5. In the Admin panel’s Manage Dashlets, an administrator-uploaded ZIP can trigger a command injection via the name of the first file in the archive, enabling execution of system commands. Several sources document authenticated command-injection abuse (includi...