CVE-2025-44823

Nagios Log Server 2024R1.3.1의 인증된 API 키 노출 ▶️ PoC 데모 CVE ID: CVE-2025-44823 날짜: 2025-04-02 작성자: Alex Tisdale, Seth Kraft 공급업체 홈페이지: https://www.nagios.com/ 공급업체 변경 로그: https://www.nagios.com/changelog/log-server 소프트웨어 링크: https://assets.nagios.com/downloads/nagios-log-server/versions.php 버전:...

CVE-2025-44823

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...

VulnCheck KEV: CVE-2021-24170

The REST API endpoint getusers in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less...

CVE-2021-24170

The REST API endpoint getusers in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less...