2284 matches found
Nagios XI < 2011R3.0 Multiple XSS Vulnerabilities
The version of Nagios XI hosted on the remote web server fails to properly sanitize input to multiple web pages. - A cross-site scripting vulnerability exists in the 'view' parameter of the 'perfgraphs/index.php' script. - A cross-site scripting vulnerability exists in the 'div' parameter of the...
NGS00194 Patch Notification: Nagios XI Network Monitor Blind SQL Injection
High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor Blind SQL Injection Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of the...
NGS00196 Patch Notification: Nagios XI Network Monitor OS Command Injection
High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor OS Command Injection Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of the...
NGS00195 Patch Notification: Nagios XI Network Monitor Stored and Reflected XSS
High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor Stored and Reflected XSS Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of...
Nagios XI跨站脚本执行和HTML注入漏洞
BUGTRAQ ID: 54262 Nagios是一款免费开放源代码的主机和服务监视软件，可使用在多种Linux和Unix操作系统下。 Nagios XI 2011R1.9在过滤用户提供的输入时存在安全漏洞，攻击者可利用此漏洞在受影响浏览器中执行HTML和脚本代码，窃取Cookie身份验证凭证或控制站点外观。 0 Nagios XI 2011R1.9 Nagios XI 厂商补丁： Nagios ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.nagios.org/...
0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R3.0
================ 0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI 2011R3.0 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ Multiple reflected XSS vulnerabilities exist within Nagios XI 2011R3....
Nagios XI Cross Site Scripting
================ 0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI alert'0a29'&opt=topalerts Page: /nagiosxi/perfgraphs/index.php POC: http://site/nagiosxi/perfgraphs/index.php?view='alert'0a29'&start=&end=&startdate=&enddate=...
Heap spraying Adobe Illustrator
Due to the recent patched vulnerabilities in Adobe Illustrator CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026 it becomes interesting to analyze the exploitability facts of the .ai file format. Early versions of the AI file format are true EPS files with a restricted, compact synta...
SAP Business Objects XI R2 Infoview Multiple XSS
Class Input Validation Error Remote Yes Published 10 February 11:00AM Vulnerable XI R2 SAP Business Objects is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
SAP Business Objects InfoVew System - 'listing.aspx?searchText' Cross-Site Scripting
source: https://www.securityfocus.com/bid/52361/info SAP Business Objects is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...
SAP Business Objects XI R2 Cross Site Scripting
Class Input Validation Error Remote Yes Published 10 February 11:00AM Vulnerable XI R2 SAP Business Objects is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
lighttpd - Denial of Service (PoC)
29 of November 2011 was the date of public disclosure interesting vulnerability in lighttpd server. Xi Wang discovered that modauth for this server does not propely decode characters from the extended ASCII table. The vulnerable code is below: "src/httpauth.c:67" --- CUT --- static const short...
0A29-11-3 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R1.9
================ Cross-Site Scripting vulnerabilities in Nagios XI 2011R1.9 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ Multiple XSS vulnerabilities exist within Nagios XI. It is entirely likely this...
0A29-11-4 : Privilege escalation vulnerabilities in Nagios XI installer < 2011R1.9
================ Privilege escalation vulnerabilities in Nagios XI installer 2011R1.9 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ Multiple privilege escalations exist within Nagios XI installer. Tested...
Nagios XI Multiple Cross Site Scripting Vulnerabilities
This host is running Nagios XI and is prone to multiple cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnagiosximultxssvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Nagios XI Multiple Cross Site Scripting Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011...
Nagios XI Cross Site Scripting
================ Cross-Site Scripting vulnerabilities in Nagios XI alert"0a29" Tested against 2011R1.8, dated October 28, 2011. Fixes detailed in http://assets.nagios.com/downloads/nagiosxi/CHANGES-2011.TXT 2011R1.9 - 12/07/2011 ================ Timeline: ================ 16 November 2011 -...
Nagios XI Privilege Escalation
================ Privilege escalation vulnerabilities in Nagios XI installer /dev/null; then cd /tmp rpm -Uvh epel-release.rpm ----- Vulnerability 2: Arbitrary crontab intallation ----- Files: install-crontab-root install-crontab-nagios uninstall-crontab-nagios A malicious user can exploit a race...
Nagios XI - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: www.securityfocus.com/bid/51069/info Nagios XI is prone to an HTML injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the conte...
Nagios XI - Multiple Cross-Site Scripting HTML Injection Vulnerabilities
Nagios XI - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: www.securityfocus.com/bid/51069/info Nagios XI is prone to an HTML injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Successful...
Nagios XI 'reset_configs-perms.c'本地特权提升漏洞
Bugtraq ID: 47827 Nagios是一个监视系统运行状态和网络信息的监视系统。 Nagios 'resetconfigs-perms.c'没有正确验证'setuid'函数的调用的返回值，本地攻击者可以利用漏洞获得root特权。 0 Nagios XI 厂商解决方案 目前没有详细解决方案提供： http://www.nagios.org/ rootbsd laptop:$ id uid=1001rootbsd gid=1001rootbsd groupes=1001rootbsd rootbsd laptop:$ ls -l...