Nagios-CVE-2019-15949-RCE

Nagios-CVE-2019-15949-RCE-Poc un PoC en Python para el CVE-2019-15949 Resumen Existe una vulnerabilidad en Nagios XI = 5.6.5 que permite a un atacante aprovechar un RCE para escalar privilegios a root. El exploit requiere acceso al servidor como el usuario 'nagios', o acceso CCM a través de la...

nagiosxi-root-rce-exploit

nagiosxi-root-exploit Resumen Existe una vulnerabilidad en Nagios XI = 5.6.5 que permite a un atacante aprovechar un RCE para escalar privilegios a root. El exploit requiere acceso al servidor como el usuario 'nagios', o acceso CCM a través de la interfaz web con permisos para administrar plugins...

Exploit for OS Command Injection in Nagios Nagios_Xi

Nagios-CVE-2019-15949-RCE-Poc a python PoC for the CVE-2019-15...

Nagios XI Remote Code Execution Vulnerability

Nagios XI contains a remote code execution vulnerability in which a user can modify the checkplugin executable and insert malicious commands to execute as root...

Command injection

Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile profile.php?cmd=download, is executed as root via a...

CVE-2019-15949: Improper Neutralization of Special Elements used in an OS Command

Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile profile.php?cmd=download, is executed as root via a...