GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

M. Cory Billington of theyhack.me

8 vulnerability records and advisories credit this contributor.

CVE-2026-40520
FreePBX api module Command Injection via GraphQL
CVE-2025-34227
Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection
CVE-2024-13986
Nagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCE
CVE-2025-34323
Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules
CVE-2025-34322
Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries
CVE-2025-34288
Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo
CVE-2025-34287
Nagios XI < 2024R2 Privilege Escalation via process_perfdata.pl
CVE-2025-34134
Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)