Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting A stored cross-site scripting XSS in Nagios Log Server 2.1.7 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page. Nagios Log Server 2.1.7 and older versions are affected...

CVE-2025-29471

Stored XSS Vulnerability in Nagios Log Server Privilege Escalation to Admin ▶️ PoC Demo Date: 2025-04-02 Exploit Author: Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...

CVE-2025-44823

Authenticated API Key Exposure in Nagios Log Server 2024R1.3.1 ▶️ PoC Demo CVE ID: CVE-2025-44823 Date: 2025-04-02 Authors: Alex Tisdale, Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...

CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server

CVE-2025-34322 and CVE-2025-34323 Nagios Log Server Proof of Concept exploits for CVE-2025-34322 and CVE-2025-34323 in Nagios Log Server, along with a combined script to return a shell as root. CVE-2025-34322 After auth, replace your session ID into these two curl commands. The first one set the...

The vulnerability of the Snapshots module of the Nagios Log Server monitoring and analysis software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Snapshots module of the Nagios Log Server monitoring and analysis software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the “Create User” function of the Nagios Log Server monitoring and analysis software allows a perpetrator to perform cross-site scripting attacks.

The vulnerability of the “Create User” function in the Nagios Log Server monitoring and analysis software exists due to insufficient validation or filtering of data entered by users. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Logstash data collection system allows a malicious user to execute arbitrary code with root privileges and gain full control over the application. This vulnerability in Nagios Log Server enables a hacker to perform unauthorized actions.

The vulnerability of the Logstash data collection system, a software monitoring and logging analysis tool for Nagios Log Servers, is related to errors in privilege management. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code with root privileges and...

The vulnerability of the web interface of the Nagios Log Server monitoring and analysis software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the web interface of the Nagios Log Server monitoring and analysis software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Nagios Log Server’s monitoring and analysis software interface allows a hacker to gain access to and modify data.

The vulnerability of the Nagios Log Server software monitoring and analysis interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to read and modify data...

The vulnerability of the endpoint of the Elasticsearch API system/stop service of the Nagios Log Server monitoring and analysis software allows a perpetrator to cause a service failure.

The vulnerability of the endpoint of the API system/stop service in the Elasticsearch software for monitoring and analyzing log files by Nagios Log Server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to trigger a service failure ...

The vulnerability of the user import function in Nagios Log Server, a monitoring and analysis software, allows a hacker to disclose protected information.

The vulnerability of the user import function in the Nagios Log Server monitoring and analysis software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the cluster manager component of the Nagios Log Server monitoring and analysis software allows a hacker to intercept user credentials.

The vulnerability of the cluster manager component of the Nagios Log Server monitoring and analysis software involves the transmission of confidential information in an open manner. Exploiting this vulnerability allows a malicious actor to intercept user credentials by using an unencrypted...

The vulnerability of the monitoring panel of the Nagios Log Server software allows a hacker to perform cross-site scripting attacks (XSS).

The vulnerability of the monitoring panel for Nagios Log Server exists because no measures have been taken to protect the structure of the web page when viewing log records. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Nagios Log Server monitoring and analysis software lies in its improper handling of invalid values of monitoring panel identifiers before they are passed into the internal API. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Nagios Log Server monitoring and analysis software lies in the improper checking of incorrect values of the monitoring panel identifiers before they are passed into the internal API. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Nagios Log Server monitoring and analysis software lies in its authentication mechanism’s deficiencies, which allows attackers to escalate their privileges.

The vulnerability of the Nagios Log Server monitoring and analysis software is related to deficiencies in its authentication mechanism. Exploiting this vulnerability allows a malicious actor to gain increased privileges from a remote location...

The vulnerability of the Nagios Log Server software monitoring and analysis tool lies in errors related to access control management, which allows a malicious user to elevate their privileges.

The vulnerability of the Nagios Log Server monitoring and analysis software is related to errors in managing access rights. Exploiting this vulnerability can allow an attacker to increase their privileges by executing commands on behalf of a web user of Apache...

The vulnerability of the monitoring panel of the Nagios Log Server software allows a hacker to disclose protected information.

The vulnerability of the monitoring panel for the Nagios Log Server monitoring and analysis software is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the monitoring and analysis software in Nagios Log Server’s IT infrastructure lies in the improper storage of permissions. This allows a hacker to bypass existing security restrictions and gain increased privileges.

The vulnerability of the Nagios Log Server software for monitoring and analyzing log files is related to the improper storage of permissions during the process of changing the email address of the user account. Exploiting this vulnerability allows a malicious actor to bypass existing security...

The vulnerability of the Nagios Log Server software monitoring and analysis tool lies in the improper assignment of permissions to critical resources. This allows attackers to increase their privileges and execute arbitrary code.

The vulnerability of the Nagios Log Server monitoring and analysis software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

CVE-2025-34322

Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the...