Linux Distros Unpatched Vulnerability : CVE-2024-42327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi...

Exploit for CVE-2024-42327

CVE-2024-42327: Zabbix Privilege Escalation - RCE Descrip...

Exploit for CVE-2024-42327

Zabbix-CVE-2024-42327 RCE PoC...

Exploit for CVE-2024-42327

writeup CVE-2024-42327 zabbix vulnerability alvo: 10.129.231...

Exploit for CVE-2024-42327

CVE-2024-42327 - Zabbix SQL Injection Vulnerability SQLI No...

Exploit for CVE-2024-42327

PoC and Exploit for CVE-2024-42327 / ZBX-25623 A non-admin us...

Exploit for CVE-2024-42327

cve-2024-42327 usage: cve-2024-42327.py -h -u URL -n USERN...

CVE-2024-42327

A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is availabl...

CVE-2024-42327

creationtimestamp| type| source ---|---|--- 2024-11-27 12:15:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113554863211557834 2024-11-27 12:18:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113554877465801853 2024-11-30 06:16:53+00:00| seen| https://t.me/icscert/969...

CVE-2024-42327 SQL injection in user.get API

A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is availabl...

UBUNTU-CVE-2021-47489

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix even more out of bound writes from debugfs CVE-2021-42327 was fixed by: commit f23750b5b3d98653b31d4469592935ef6364ad67 Author: Thelford Williams Date: Wed Oct 13 16:04:13 2021 -0400 drm/amdgpu: fix out of bounds...

CVE-2023-42327

Cross Site Scripting XSS vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the getserviceproviders.php page...

CVE-2023-42327

Cross Site Scripting XSS vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the getserviceproviders.php page...

CVE-2023-42327

Cross Site Scripting XSS vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the getserviceproviders.php page...

CVE-2023-42327

CVE-2023-42327 is a Cross-Site Scripting (XSS) vulnerability in Netgate pfSense v2.7.0 that allows an attacker to gain privileges by delivering a crafted URL to getserviceproviders.php. The NVD entry lists CVSS v3.1 base score 5.4 (Network, Low attack complexity, Privileges required: Low, User in...

Fedora: Security Advisory for xen (FEDORA-2022-9f51d13fa3)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-42327

creationtimestamp| type| source ---|---|--- 2022-11-01 15:14:01+00:00| seen| https://t.me/cibsecurity/52360 2025-05-05 19:20:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14970...

DEBIAN-CVE-2022-42327

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist...

CVE-2022-42327

CVE-2022-42327 concerns the Xen hypervisor. On Intel systems that support the “virtualize APIC accesses” feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode, bypassing isolation between guests. The vulnerability is classified with CVSS‑3.1: ...

CVE-2022-42327

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist...