pentester.land· Dec 13, 2023· by Oliver Brooks

Technical Advisory – Multiple Vulnerabilities in Nagios XI

Target Program: Nagios

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#RCE#Missing authentication#OS command injection#Local Privilege Escalation#Stored XSS#Plaintext Storage of a Password#Weak credentials#Privilege escalation

Technical Advisory – Multiple Vulnerabilities in Nagios XI

More Writeups Like This

Vulnerabilities in Open Source C2 Frameworks

SSD Advisory – SonicWall SMA100 Stored XSS To RCE

Technical Advisory – Multiple Vulnerabilities in PandoraFMS Enterprise

Remote code execution and elevation of local privileges in Mitel Unify OpenStage and OpenScape VoIP phones