Malicious code in xi-book-try-scale-data (npm)

The package xi-book-try-scale-data was found to contain malicious code...

MAL-2025-45888 Malicious code in riyu-xuexi-jiaming-biaozhu-erlingyibalingyi-erlingyibalingsi (npm)

The package riyu-xuexi-jiaming-biaozhu-erlingyibalingyi-erlingyibalingsi was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2022-38251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Performance Settings page under the Admin panel. CVE-2022-382...

Linux Distros Unpatched Vulnerability : CVE-2022-38248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios XI before v5.8.7 was discovered to contain multiple cross-site scripting XSS vulnerabilities at auditlog.php. CVE-2022-38248 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2022-38249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the MTR component in version 1.0.4. CVE-2022-38249 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2022-38247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Settings page under the Admin panel. CVE-2022-38247 Note that...

Linux Distros Unpatched Vulnerability : CVE-2022-38250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mibname parameter at the Manage MIBs page. CVE-2022-38250 Note that Nessus reli...

CVE-2025-56432

A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...

CVE-2024-13986

Nagios XI 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface. The issue arises from insufficient validation of file paths and extensions during MIB upload and snapshot rename...

CVE-2024-13986

Nagios XI 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface. The issue arises from insufficient validation of file paths and extensions during MIB upload and snapshot rename...

CVE-2024-13986 Nagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCE

Nagios XI 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface. The issue arises from insufficient validation of file paths and extensions during MIB upload and snapshot rename...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.3.2, which stems from insufficient...

CVE-2025-56432

A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...

CVE-2025-56432

A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...

CVE-2025-56432

CVE-2025-56432 affects Nagios XI 2024R2. A cross-site scripting (XSS) vulnerability exists in a web component that renders performance-related data, allowing remote attackers to run arbitrary JavaScript in the context of a logged-in user via a specially crafted URL. The PT-2025-34786 entry confir...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R2, which stems from cross-site scripting in a...

Malicious code in authorize-theta-xi-quick-user (npm)

The package authorize-theta-xi-quick-user was found to contain malicious code...

Malicious code in xi-xml-user-process-fire (npm)

The package xi-xml-user-process-fire was found to contain malicious code...

Malicious code in sed-good-finally-tree-xi (npm)

The package sed-good-finally-tree-xi was found to contain malicious code...

Malicious code in xi-epsilon-star-minify-eta (npm)

The package xi-epsilon-star-minify-eta was found to contain malicious code...