The vulnerability of the Nagios Fusion software for visualizing IT infrastructure’s operational status lies in its insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of the Nagios Fusion software for visualizing IT infrastructure’s operational status is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges by installing a malicious component containing PHP code...

Unauthorized Access Vulnerability in Video Fusion Gateway of Jiangsu Huaiye Information Technology Co.

Jiangsu Huaiye Huaiye is an original manufacturer with two independent core technologies of video cloud switching and wireless broadband private network communication. An unauthorized access vulnerability exists in the Video Convergence Gateway of Jiangsu Huaiye Information Technology Company...

Nagios Fusion < 4.1.9 Multiple Vulnerabilities

According to the self-reported version of Nagios Fusion, the remote host is affected by multiple vulnerabilities, including the following: - Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows for Escalation of Privileges or Cod...

PHPFusion 9.03.50 - Remote Code Execution

Exploit Title: PHPFusion 9.03.50 - Remote Code Execution Date: 20/05/2021 Exploit Author: g0ldm45k Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/infusions/downloads/downloads.php?catid=30&downloadid=606 Version: 9.03.50 Tested on: Docker + Debi...

Nagios Cross-Site Scripting Vulnerability (CNVD-2021-37137)

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A cross-site scripting vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by remote attackers to take control of the Fusion server and inject arbitrary HTML...

Nagios Access Control Error Vulnerability

Nagios is a set of open source and free network monitoring tools from the American company Nagios. An access control error vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an attacker to extract the password used to manage the Fusion server via the...

Unspecified Vulnerability in Nagios

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A security vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an attacker to escalate privileges to Nagios by installing a malicious component containing PHP...

Nagios Command Injection Vulnerability (CNVD-2021-37130)

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A command injection vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an attacker to elevate privileges or execute code as root via vectors in cmdsubsys.php...

Unspecified Vulnerability in Nagios (CNVD-2021-37131)

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A security vulnerability exists in Nagios Fusion version 4.1.8 and earlier versions, which can be exploited by attackers to elevate privileges or execute code...

Unspecified Vulnerability in Nagios (CNVD-2021-37129)

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A security vulnerability exists in Nagios Fusion version 4.1.8 and earlier and Nagios XI version 5.7.5 and earlier, which stems from unduplicated Yankee data authenticity in the program and can be...

Nagios Command Injection Vulnerability

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A command injection vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an attacker to escalate privileges from apache to root...

Nagios Command Injection Vulnerability (CNVD-2021-37132)

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A command injection vulnerability exists in Nagios Fusion version 4.1.8 and earlier versions, which can be exploited by an attacker to elevate privileges...

CVE-2020-28908

Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios...

CVE-2020-28911

Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the testserver command in ajaxhelper.php...

CVE-2020-28909

Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification of scripts. Low-privileges users are able to modify files that can be executed by sudo...

CVE-2020-28907

Incorrect SSL certificate validation in Nagios Fusion 4.1.8 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to download of an untrusted update package in upgradetolatest.sh...

CVE-2020-28908

Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios...

CVE-2020-28911

Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the testserver command in ajaxhelper.php...

CVE-2020-28906

Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root. Low-privileged users are able to modify files that are included aka sourced by scripts executed by root...

CVE-2020-28909

Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification of scripts. Low-privileges users are able to modify files that can be executed by sudo...