Lucene search
+L

14 matches found

Kitploit
Kitploit
added 2026/09/06 7:59 a.m.7 views

CVE-2024-0670

CVE-2024-0670 – CheckMK Agent 中的本地权限提升(PowerShell 概念验证) 摘要 本仓库提供了一个针对 CVE-2024-0670 的独立 PowerShell 概念验证 ,这是 CheckMK Agent 中的一个 Windows 本地权限提升漏洞。该漏洞允许低权限本地用户通过利用 MSI 修复过程中可预测的命令文件执行来提升至 NT AUTHORITY\SYSTEM 。 此实现是对 elsevar11 在 CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit 公开的 PoC...

8.8CVSS8.1AI score0.00332EPSS
SaveExploits5References3
Kitploit
Kitploit
added 2026/09/05 3:28 p.m.6 views

CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit

CVE-2024-0670 – CheckMK Agent ローカル特権昇格 PoC このリポジトリには、CVE-2024-0670(CheckMK Windows Agent のローカル特権昇格の脆弱性)のシンプルでクリーンな概念実証が含まれています。 低権限のユーザーが、MSI修復中に実行される書き込み可能な一時ファイルパスを悪用することで、SYSTEM権限を取得できます。 🔍 脆弱性の概要 ベンダー: Tribe29 CVE: CVE-2024-0670 アドバイザリ:...

8.8CVSS7.9AI score0.00332EPSS
SaveExploits5
Vulnrichment
Vulnrichment
added 2026/05/13 8:35 a.m.10 views

CVE-2024-47091 Privilege escalation via mk_mysql agent plugin on Windows

Privilege escalation in the mkmysql agent plugin on Windows in Checkmk 2.4.0p29, 2.3.0p47, and 2.2.0 EOL allows a local unprivileged user able to create a Windows service whose name matches 'MySQL' or 'MariaDB' or with write access to a binary referenced by such a service to execute arbitrary cod...

5.2CVSS6.2AI score0.00119EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/09 3:01 p.m.35 views

CVE-2025-32919 Privilege Escalation in Windows License plugin for Checkmk Windows Agent

Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of 2.1.0 EOL...

8.8CVSS0.00249EPSS
SaveExploits1References2
CVE
CVE
added 2025/10/09 3:01 p.m.31 views

CVE-2025-32919

CVE-2025-32919 is due to use of an insecure temporary directory in the Windows License plugin of the Checkmk Windows Agent, enabling local privilege escalation. Affected versions: Checkmk 2.4.0 before 2.4.0p13, 2.3.0 before 2.3.0p38, 2.2.0 before 2.2.0p46, and all 2.1.0 (EOL). Root cause: insecur...

8.8CVSS6.5AI score0.00249EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2024-37081

Malicious code in bioql PyPI...

4.8CVSS6.4AI score0.00184EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2024-25913

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00168EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:27 a.m.13 views

CVE-2024-38864

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p23, 2.2.0p38 and = 2.1.0p49 EOL allows a local attacker to read sensitive data...

4.8CVSS6.4AI score0.00184EPSS
SaveExploits0
NVD
NVD
added 2024/12/19 4:15 p.m.32 views

CVE-2024-38864

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p23, 2.2.0p38 and = 2.1.0p49 EOL allows a local attacker to read sensitive data...

4.8CVSS0.00184EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/19 4:07 p.m.13 views

CVE-2024-38864 User-Readable Private Key in Windows Agent

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p23, 2.2.0p38 and = 2.1.0p49 EOL allows a local attacker to read sensitive data...

4.8CVSS6.4AI score0.00184EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/19 4:07 p.m.14 views

CVE-2024-38864 User-Readable Private Key in Windows Agent

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p23, 2.2.0p38 and = 2.1.0p49 EOL allows a local attacker to read sensitive data...

4.8CVSS6AI score
SaveExploits0References3
CVE
CVE
added 2024/12/19 4:07 p.m.62 views

CVE-2024-38864

CVE-2024-38864 concerns incorrect permissions on the Checkmk Windows Agent data directory, allowing a local attacker to read sensitive data. Affected are Checkmk Windows Agent implementations prior to 2.3.0p23, prior to 2.2.0p38, and earlier than or equal to 2.1.0p49 (EOL). The issue is local and...

4.8CVSS6AI score0.00184EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/19 4:07 p.m.45 views

CVE-2024-38864 User-Readable Private Key in Windows Agent

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p23, 2.2.0p38 and = 2.1.0p49 EOL allows a local attacker to read sensitive data...

4.8CVSS0.00184EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/10 1:15 p.m.8 views

UBUNTU-CVE-2024-28827

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL allows a local attacker to gain SYSTEM privileges...

8.8CVSS5.8AI score0.00168EPSS
SaveExploits0References3
Rows per page
Query Builder