Lucene search
+L

1919 matches found

Packet Storm
Packet Storm
added 2024/03/26 12:00 a.m.373 views

Nagios XI 2024R1.01 SQL Injection

Exploit Title: NAGIOS XI SQLI Google Dork: if applicable Date: 02/26/2024 Exploit Author: Jarod Jaslow MAWK https://www.linkedin.com/in/jarod-jaslow-codename-mawk-265144201/ Vendor Homepage: https://www.nagios.com/changelog/nagios-xi Software Link: https://github.com/MAWK0235/CVE-2024-24401...

7.1AI score0.45884EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2024/03/25 12:00 a.m.362 views

Nagios XI Version 2024R1.01 - SQL Injection

Exploit Title: NAGIOS XI SQLI Google Dork: if applicable Date: 02/26/2024 Exploit Author: Jarod Jaslow MAWK https://www.linkedin.com/in/jarod-jaslow-codename-mawk-265144201/ Vendor Homepage: https://www.nagios.com/changelog/nagios-xi Software Link: https://github.com/MAWK0235/CVE-2024-24401...

9.8CVSS7AI score0.45884EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2024/03/23 12:31 a.m.484 views

Exploit for SQL Injection in Nagios Nagios_Xi

CVE-2023-48084 Fixes broken syntax in the POC, primarily incor...

9.8CVSS9.6AI score0.3374EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2024/03/04 12:00 a.m.9 views

PT-2024-2965

Name of the Vulnerable Software and Affected Versions Xorg-server affected versions not specified Description The issue is related to a heap-based buffer over-read vulnerability in the ProcXIGetSelectedEvents function of the X.org server. This occurs when byte-swapped length values are used in...

9.8CVSS7.3AI score0.02106EPSS
SaveExploits0References203
GithubExploit
GithubExploit
added 2024/03/01 4:06 a.m.321 views

Exploit for SQL Injection in Nagios Nagios_Xi

CVE-2023-48084 Python exploit for the CVE-2023-48084 - Nagi...

9.8CVSS10AI score0.3374EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2024/03/01 12:00 a.m.85 views

Nagios XI < 2024R1.0.2 Multiple Vulnerabilities

According to the self-reported version of Nagios XI, the remote host is affected by multiple vulnerabilities, including the following: - Nagios XI is vulnerable to a SQL Injection when utilizing the Favorites component. Details forthcoming. CVE-2024-24401 - Nagios XI is vulnerable to a privilege...

9.8CVSS8.6AI score0.45884EPSS
SaveExploits8References5
Tenable Nessus
Tenable Nessus
added 2024/03/01 12:00 a.m.29 views

Nagios XI < 2024R1.0.1 XSS Vulnerability

According to the self-reported version of Nagios XI, the remote host is affected by a stored cross-site scripting XSS vulnerability in the NOC component of Nagios XI version up to and including 2024R1 allows low-privileged users to execute malicious HTML or JavaScript code via the audio file uplo...

5.4CVSS6.2AI score0.01264EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/26 5:15 p.m.7 views

CVE-2024-24402

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/nagios/bin/npcd component...

9.8CVSS5.8AI score0.03398EPSS
SaveExploits1References1
OSV
OSV
added 2024/02/26 5:15 p.m.6 views

CVE-2024-24401

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component...

9.8CVSS6.2AI score0.45884EPSS
SaveExploits5References1
NVD
NVD
added 2024/02/26 5:15 p.m.21 views

CVE-2024-24401

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component...

9.8CVSS8.1AI score0.45884EPSS
SaveExploits5References1
NVD
NVD
added 2024/02/26 5:15 p.m.39 views

CVE-2024-24402

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/nagios/bin/npcd component...

9.8CVSS6.7AI score0.03398EPSS
SaveExploits1References1
Prion
Prion
added 2024/02/26 5:15 p.m.27 views

Sql injection

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component...

9AI score0.45884EPSS
SaveExploits5References1
Prion
Prion
added 2024/02/26 5:15 p.m.21 views

Design/Logic Flaw

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/nagios/bin/npcd component...

7.3AI score0.03398EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/02/26 12:00 a.m.56 views

CVE-2024-24402

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/nagios/bin/npcd component...

6.9AI score0.03398EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/02/26 12:00 a.m.15 views

CVE-2024-24402

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/nagios/bin/npcd component...

7AI score0.03398EPSS
SaveExploits1References1
CVE
CVE
added 2024/02/26 12:00 a.m.8221 views

CVE-2024-24402

CVE-2024-24402 affects Nagios XI 2024R1.01, enabling privilege escalation via a crafted script targeting /usr/local/nagios/bin/npcd. Multiple sources (Red Hat, CIRCL, NVD/NASL/Nessus and CVE repositories) confirm the issue and its association with Nagios XI. In published timelines, Nagios has rel...

9.8CVSS6.9AI score0.03398EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/02/26 12:00 a.m.12 views

Nagios XI SQL Injection Vulnerability

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. Nagios XI version 2024R1.01 suffers from a SQL injection vulnerability that originates from allowing remot...

9.8CVSS8.8AI score0.45884EPSS
SaveExploits5References2
CNNVD
CNNVD
added 2024/02/26 12:00 a.m.8 views

Nagios XI Security Vulnerability

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R1.01, which stems from a vulnerability that allo...

9.8CVSS7.2AI score0.03398EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/02/26 12:00 a.m.47 views

CVE-2024-24401

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component...

8.5AI score0.45884EPSS
SaveExploits5References1
Vulnrichment
Vulnrichment
added 2024/02/26 12:00 a.m.17 views

CVE-2024-24401

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component...

8.5AI score0.45884EPSS
SaveExploits5References1
Rows per page
Query Builder