Debian dsa-6308 : nagios4 - security update

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6308 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6308-1 [email protected] https://www.debian.org/security/...

Nagios XI operating system command injection vulnerability

Nagios XI is a IT infrastructure monitoring solution developed by the American company Nagios. This solution supports monitoring and early warning of applications, services, operating systems, etc. Nagios XI has a vulnerability related to operating system command injection. This vulnerability ste...

📄 Nagios XI Monitoring Wizard Command Injection

Nagios XI is a widely used enterprise monitoring solution. A vulnerability exists within the Monitoring Wizard configuration page where the database parameter is unsafely passed into backend operations. Authenticated users can exploit this to execute arbitrary system commands, allowing full remot...

Exploit for SQL Injection in Nagios Nagios_Xi

Vulnerability Report CVE Disovered DESIGNED TO BE RUN ON KALI...

Nagios XI security vulnerabilities

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2026R1.1, which stems from an insecure...

Nagios XI Code Execution

The vulnerability of the Nagios XI monitoring tool is related to the lack of measures taken to protect the website structure when loading the entry page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

process_perfdata.pl Code Execution

The vulnerability of the processperfdata.pl script, a monitoring tool for IT infrastructure in Nagios XI, is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

Nagios XI Disclosure

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Nagios XI Highcharts XSS

The vulnerability of the library used to create Highcharts charts, a tool for monitoring Nagios XI, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker, operating remotely, to perform cross-site scripting attacks...

Nagios XI Core Config Manager Command Execution

The vulnerability of the commandtest.php script of the Core Config Manager component of the Nagios XI monitoring tool is related to the failure to take measures to neutralize special elements used in the operating system’s commands when processing the address parameter. Exploiting this...

Business Process Intelligence Nagios XI XSS

The vulnerability of the Business Process Intelligence BPI module of the Nagios XI monitoring tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Nagios XI Data Source Validation Phishing

The vulnerability of the Nagios XI monitoring tool is related to an error in data source validation when processing HTTP headers. Exploiting this vulnerability allows a malicious actor to perform phishing attacks remotely...

Nagios XI System Profile Privilege Escalation

The vulnerability of the System Profile function in the Nagios XI monitoring tool is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Nagios XI Authentication Bypass Info Disclosure

The vulnerability of the Nagios XI monitoring tool is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Nagios XI Core Configuration Manager Data Compromise

The vulnerability of the Core Configuration Manager CCM interface of the Nagios XI IT infrastructure monitoring tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

Nagios XI Command Injection

The vulnerability of the Nagios XI monitoring tool exists because measures to neutralize specific elements used in the operating system command have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Nagios XI XSS

The vulnerability of the Nagios XI monitoring tool exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

Nagios XI User Management XSS

The vulnerability of the “User Management” module of the Nagios XI monitoring tool’s administrative interface is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Nagios XI XSS

The vulnerability of the update checking function in the Nagios XI IT infrastructure monitoring tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

Nagios XI Highcharts Library Data Access

The vulnerability of the library used to create Highcharts charts, a tool for monitoring Nagios XI, is related to deficiencies in access control when using a temporal catalog for export. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...