Harshal Tembhurne

2 exploits Active since Apr 2025
CVE-2025-28131 WRITEUP MEDIUM WRITEUP
Nagios Network Analyzer 2024R1.0.3 - Broken Access Control
A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enabling unauthorized modifications that compromise system integrity and availability.
CVSS 4.6
CVE-2025-28132 WRITEUP MEDIUM WRITEUP
Nagios Network Analyzer 2024R1.0.3 - Insufficient Session Expiration
A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized access and account takeover. This occurs due to insufficient session expiration, where session tokens remain valid beyond logout, allowing an attacker to impersonate users and perform actions on their behalf.
CVSS 4.6