CVE-2023-40931-POC

CVE-2023-40931 개념 증명PoC 🚨 이 저장소는 CVE-2023-40931의 개념 증명PoC을 포함합니다. 이 저장소의 목적은 교육 및 연구 목적으로만 취약점을 시연하는 것입니다. 🛠️ 면책 조항 ⚠️ 이 프로젝트는 교육 목적 및 승인된 테스트만을 위한 것입니다. 이 코드를 오용하면 법적 결과가 발생할 수 있습니다. 작성자는 이 코드의 오용이나 손해에 대해 책임을 지지 않습니다. 시스템을 테스트하기 전에 항상 적절한 승인을 받으십시오. 🔒 세부 정보 📋 CVE ID : CVE-2023-40931 취약점 유형 : 취약점...

Nagios-XI-s-CVE-2023-40931-Exploit

이 저장소에는 README가 없습니다...

Exploit for SQL Injection in Nagios Nagios_Xi

PoC exploit for CVE-2023-40931, a vulnerability in the HTB MONIT...

Exploit for SQL Injection in Nagios Nagios_Xi

CVE-2023-40931 The sqlmap payload to exploit CVE-2023-40931...

Critical Security Vulnerabilities Uncovered in Nagios XI

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Several security vulnerabilities have been identified in Nagios XI, a network monitoring software, which could potentially lead to privilege escalation and information disclosure. These...

Critical Security Flaws Exposed in Nagios XI Network Monitoring Software

Multiple security flaws have been disclosed in the Nagios XI network monitoring software that could result in privilege escalation and information disclosure. The four security vulnerabilities, tracked from CVE-2023-40931 through CVE-2023-40934, impact Nagios XI versions 5.11.1 and lower. Followi...

CVE-2023-40931

A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/bannermessage-ajaxhelper.php...

CVE-2023-40931

Nagios XI (version 5.11.0–5.11.1) contains a SQL injection in the POST parameter ID to /nagiosxi/admin/banner_message-ajaxhelper.php, exploitable by authenticated users to run arbitrary SQL commands. Public PoCs exist (e.g., GitHub exploits) and Nessus/Nuclei templates reference this CVE. Remedia...