CVE-2024-33775

CVE 发现者：K. Wahab NeoX 漏洞详情： 产品： Nagios XI 版本 2024R1.01 漏洞： 从 "NAGIOS" 或 "APACHE" 用户权限提升 结果： 获得目标系统的完整 root 访问权限 CVE： https://vulners.com/cve/CVE-2024-33775 利用方法： 本例中使用 RSS Dashlet。 1. 创建新的 Nagios XI 实例： 你可以从以下地址下载 Nagios XI 版本 2024R1.01 的 OVA...

CVE-2026-29097 SuiteCRM Server-Side Request Forgery and Denial of Service via RSS Feed Dashlet

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions prior to 7.15.1 and 8.9.3 contain a Server-Side Request Forgery SSRF vulnerability combined with a Denial of Service DoS condition in the RSS Feed Dashlet component. Versions 7.15.1 an...

CVE-2018-20172

An issue was discovered in Nagios XI before 5.5.8. The rssurl parameter of rssdashlet/magpierss/scripts/magpieslashbox.php is not filtered, resulting in an XSS vulnerability...

SugarCRM v6.5.1 rss dashlet LFI via XXE Attack

No description provided by source...