CVE-2023-40931-POC

CVE-2023-40931 Prova di concetto PoC 🚨 Questo repository contiene una Prova di concetto PoC per CVE-2023-40931, una vulnerabilità di sicurezza identificata in software/sistema interessato. Lo scopo di questo repository è dimostrare la vulnerabilità solo a fini educativi e di ricerca. 🛠️ Disclaimer...

Nagios-XI-s-CVE-2023-40931-Exploit

Este repositorio nao tem um README...

Exploit for SQL Injection in Nagios Nagios_Xi

PoC exploit for CVE-2023-40931, a vulnerability in the HTB MONIT...

Exploit for SQL Injection in Nagios Nagios_Xi

CVE-2023-40931 The sqlmap payload to exploit CVE-2023-40931...

Critical Security Vulnerabilities Uncovered in Nagios XI

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Several security vulnerabilities have been identified in Nagios XI, a network monitoring software, which could potentially lead to privilege escalation and information disclosure. These...

Critical Security Flaws Exposed in Nagios XI Network Monitoring Software

Multiple security flaws have been disclosed in the Nagios XI network monitoring software that could result in privilege escalation and information disclosure. The four security vulnerabilities, tracked from CVE-2023-40931 through CVE-2023-40934, impact Nagios XI versions 5.11.1 and lower. Followi...

CVE-2023-40931

Nagios XI (version 5.11.0–5.11.1) contains a SQL injection in the POST parameter ID to /nagiosxi/admin/banner_message-ajaxhelper.php, exploitable by authenticated users to run arbitrary SQL commands. Public PoCs exist (e.g., GitHub exploits) and Nessus/Nuclei templates reference this CVE. Remedia...

CVE-2023-40931

A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/bannermessage-ajaxhelper.php...