2125 matches found
PT-2024-10113 · Zabbix +4 · Zabbix +4
Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 7.0.3 Description: The issue is related to insufficient input validation in the Zabbix universal monitoring system. This can allow a remote attacker to elevate their privileges. When a URL is added to the map element,...
system-user-zabbix-6.0.33-1.1 on GA media (moderate)
system-user-zabbix-6.0.33-1.1 on GA media Announcement ID: openSUSE-SU-2024:14356-1 Rating: moderate Cross-References: CVE-2024-36461 CVSS scores: CVE-2024-36461 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...
OPENSUSE-SU-2024:14356-1 system-user-zabbix-6.0.33-1.1 on GA media
These are all security issues fixed in the system-user-zabbix-6.0.33-1.1 package on the GA media of openSUSE Tumbleweed...
Exploit for Authentication Bypass by Spoofing in Zabbix
CVE-2022-23131 Zabbix SAML Authentication Exploit This Python...
PT-2024-41369 · Zabbix Llc. · Zabbix
Уязвимость веб-интерфейся Zabbix UI системы мониторинга ИТ-инфраструктуры Zabbix, связанная с небезопасной конфигурацией. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть защищаемую информацию...
The vulnerability of the Zabbix universal monitoring system, related to the improper assignment of permissions for critical resources, allows a intruder to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Zabbix universal monitoring system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...
The vulnerability of the Duktape component in the Zabbix monitoring system, related to unvalidated array indexing, allows a intruder to trigger a service failure.
The vulnerability of the Duktape component in the Zabbix monitoring system is related to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Zabbix universal monitoring system arises from the improper neutralization of special elements used in the command line. This allows a hacker to execute additional AT commands on the modem.
The vulnerability of the Zabbix universal monitoring system lies in the execution of test SMS messages, by providing a specially created phone number, and executing additional AT commands on the modem. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute addition...
The vulnerability of the universal monitoring system Zabbix, related to the allocation of unlimited memory, allows a intruder to trigger a service failure.
The vulnerability of the Zabbix universal monitoring system is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the universal monitoring system Zabbix, related to improper control of code generation, allows a intruder to execute arbitrary code.
The vulnerability of the Zabbix universal monitoring system is related to improper control of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...
The vulnerability of the Zabbix universal monitoring system, related to the storage of passwords in an open manner, allows a intruder to access confidential information.
The vulnerability of the Zabbix universal monitoring system lies in the ability to view unprotected text passwords in the audit log, where the passwords are displayed as plain text. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to confidential...
The vulnerability of the universal monitoring system Zabbix, related to the replacement of an unreliable indicator, allows a intruder to execute arbitrary code.
The vulnerability of the Zabbix universal monitoring system lies in the ability to directly modify memory pointers in the JavaScript engine. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Zabbix universal monitoring system, related to improper maintenance of permissions, allows attackers to increase their privileges.
The vulnerability of the Zabbix universal monitoring system is related to improper maintenance of permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the universal monitoring system Zabbix, related to the distribution of resources without any restrictions or regulations, allows a intruder to trigger a service failure.
The vulnerability of the Zabbix universal monitoring system is related to the use of excessive resources without proper restrictions or controls. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
ROS-20240910-06
A vulnerability in the Zabbix universal monitoring system is related to improper code generation controls. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code Zabbix universal monitoring system vulnerability is related to the ability to directly...
PT-2024-9093 · Zabbix +4 · Zabbix +4
Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to a buffer overflow in the str base64 encode rfc2047 function of the Zabbix server, which is part of a universal monitoring system. This can be exploited by a remote...
Zabbix Server Brute Force Utility
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/zabbix' require 'metasploit/framework/credentialcollection' class MetasploitModule 'Zabbix Server Brute Force Utility',...
Zabbix toggle_ids SQL Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zabbix toggleids SQL Injection', 'Description' = %q This module will exploit a SQL injection in Zabbix 3.0.3 and likely prior in order to save th...
[SECURITY] Fedora 40 Update: zabbix-6.0.33-1.fc40
Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...