exploit/linux/http/nagios_xi_magpie_debug

weaponized

Nagios XI Magpie_debug.php Root Remote Code Execution

view exploit source metasploittype exploitpublished 2018-11-14catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-15710US	high7.8	38.2% (99th)	Exploit	2018-11-14
Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.
CVE-2018-15708US	critical9.8	89.4% (100th)	Exploit	2018-11-14
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.