112 matches found
Command Injection
Snoopy library is vulnerable to command injection attacks. This allows remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers which may leads to data modification...
Remote Code Execution (RCE)
nagios is vulnerable to remote code execution RCE attacks. The vulnerability exists as the httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...
Nagios XI Snoopy Unauthorized Remote Command Execution Vulnerability
Nagios XI is a suite of IT infrastructure monitoring solutions from Nagios, USA. The solution supports monitoring and alerting of applications, services, operating systems, etc. Snoopy is one of the PHP classes that emulates a Web browser. A security vulnerability exists in Snoopy version 1.0 in...
CVE-2018-15708
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request...
CVE-2018-15708
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request...
CVE-2018-15708
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request...
CVE-2018-15708
CVE-2018-15708 affects Nagios XI 5.5.6 (Snoopy 1.0) and enables unauthenticated remote command execution via a crafted HTTP request. Exploit code and public disclosures (Exploit-DB/Metasploit modules) show the vulnerability is used to achieve remote code execution; a Metasploit module also notes ...
Nagios XI RCE via Snoopy Library
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request. Recent assessments: space-r7 at June 28, 2019 3:23pm UTC reported: If this vulnerability is found in the wild, then it’s likely that the target is vulnerable to...
Security Bulletin: Vulnerabilities in nagios affect PowerKVM
Summary PowerKVM is affected by numerous vulnerabilities in nagios. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-5008 DESCRIPTION: Snoopy could allow a remote attacker to execute arbitrary commands on the system, caused by an incomplete fix related to the use of...
Amazon Linux AMI : nagios (ALAS-2017-899)
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in...
CVE-2008-7313
The httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...
CVE-2014-5009
Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008...
CVE-2008-7313
The httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...
CVE-2014-5008
Snoopy allows remote attackers to execute arbitrary commands...
Design/Logic Flaw
The httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...
Design/Logic Flaw
Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008...
CVE-2014-5009
Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008...
DEBIAN-CVE-2014-5008
Snoopy allows remote attackers to execute arbitrary commands...