1919 matches found
Nagios XI security vulnerabilities
Commands injection, SQL injection...
Nagios XI Network Monitor Graph Explorer Component Command Injection
Exploit for unix platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Nagios XI Network Monitor Graph Explorer Component - Command Injection (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Nagios XI Network...
Nagios XI Network Monitor Graph Explorer Component Command Injection
This module exploits a vulnerability found in Nagios XI Network Monitor's component 'Graph Explorer'. An authenticated user can execute system commands by injecting it in several parameters, such as in visApi.php's 'host' parameter, which results in remote code execution. Module Options msf use...
Nagios XI Network Monitor 2011R1.9 SQL Injection Vulnerability
Nagios XI Network Monitor version 2011R1.9 suffers from a remote blind SQL injection vulnerability. ======= Summary ======= Name: Nagios XI Network Monitor - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00194 Discoverer: Daniel Compton Vendor: Nagios Vendor Reference: 0000282...
Nagios XI Network Monitor 2011R1.9 OS Command Injection
======= Summary ======= Name: Nagios XI Network Monitor - OS Command Injection Release Date: 30 November 2012 Reference: NGS00196 Discoverer: Daniel Compton Vendor: Nagios Vendor Reference: 0000283 Systems Affected: Nagios XI Network Monitor 2011R1.9 Risk: High Status: Published ======== TimeLine...
Adobe Patches DoS Flaw in ColdFusion 10
Adobe has addressed a denial-of-service vulnerability in the ColdFusion platform and an update is available. ColdFusion is Adobe’s platform and application server used by developers to build Web applications. The security hotfix is for ColdFusion 10 Update 1 and above for the Windows operating...
Adobe Reader zero-day vulnerability with modified Blackhole Exploit-Kit
Group-IB, a Russian cybercrime investigation company has discovered a zero-day vulnerability, affects Adobe Reader X and Adobe Reader XI. The vulnerability is also included in new modified version of Blackhole Exploit-Kit, which is used for the distributing the banking Trojans Zeus, Spyeye,...
Nagios XI < 2011R1.9 login.php XSS
The version of Nagios XI hosted on the remote web server fails to properly sanitize input to the login.php script. An attacker can leverage this issue by enticing a user to follow a malicious URL, causing attacker-specified script code to run inside the user's browser in the context of the affect...
Nagios XI < 2011R1.9 Multiple Vulnerabilities
The version of Nagios XI hosted on the remote web server is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists in the method used to install RPMs. - A privilege escalation vulnerability exists in the method used to edit crontab files. - Multiple reflective...
Nagios XI < 2011R3.0 Multiple XSS Vulnerabilities
The version of Nagios XI hosted on the remote web server fails to properly sanitize input to multiple web pages. - A cross-site scripting vulnerability exists in the 'view' parameter of the 'perfgraphs/index.php' script. - A cross-site scripting vulnerability exists in the 'div' parameter of the...
NGS00195 Patch Notification: Nagios XI Network Monitor Stored and Reflected XSS
High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor Stored and Reflected XSS Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of...
NGS00196 Patch Notification: Nagios XI Network Monitor OS Command Injection
High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor OS Command Injection Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of the...
NGS00194 Patch Notification: Nagios XI Network Monitor Blind SQL Injection
High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor Blind SQL Injection Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of the...
Nagios XI跨站脚本执行和HTML注入漏洞
BUGTRAQ ID: 54262 Nagios是一款免费开放源代码的主机和服务监视软件，可使用在多种Linux和Unix操作系统下。 Nagios XI 2011R1.9在过滤用户提供的输入时存在安全漏洞，攻击者可利用此漏洞在受影响浏览器中执行HTML和脚本代码，窃取Cookie身份验证凭证或控制站点外观。 0 Nagios XI 2011R1.9 Nagios XI 厂商补丁： Nagios ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.nagios.org/...
0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R3.0
================ 0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI 2011R3.0 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ Multiple reflected XSS vulnerabilities exist within Nagios XI 2011R3....
Nagios XI Cross Site Scripting
================ 0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI alert'0a29'&opt=topalerts Page: /nagiosxi/perfgraphs/index.php POC: http://site/nagiosxi/perfgraphs/index.php?view='alert'0a29'&start=&end=&startdate=&enddate=...
Heap spraying Adobe Illustrator
Due to the recent patched vulnerabilities in Adobe Illustrator CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026 it becomes interesting to analyze the exploitability facts of the .ai file format. Early versions of the AI file format are true EPS files with a restricted, compact synta...
SAP Business Objects XI R2 Infoview Multiple XSS
Class Input Validation Error Remote Yes Published 10 February 11:00AM Vulnerable XI R2 SAP Business Objects is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
SAP Business Objects InfoVew System - 'listing.aspx?searchText' Cross-Site Scripting
source: https://www.securityfocus.com/bid/52361/info SAP Business Objects is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...