CVE-2024-22120-RCE

CVE-2024-22120 ToolKit Affected Version/s 6.0.0 - 6.0.27 6.4.0 - 6.4.12 7.0.0alpha1 Credit https://x.com/mf0cuz https://support.zabbix.com/browse/ZBX-24505 https://packetstormsecurity.com/files/137454/Zabbix-3.0.3-Remote-Command-Execution.html Premise a low-privilege user Have permission to execu...

ReproducingCVEs_Akshath_Nagulapally

ReproducingCVEsAkshathNagulapally Reproducing the following CVEs with dockerfile:CVE-2024-33644 CVE-2024-34370 CVE-2024-22120...

Linux Distros Unpatched Vulnerability : CVE-2024-22120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to Audit Log. Due to clientip field is not...

Exploit for CVE-2024-22120

CVE-2024-22120 ToolKit Affected Version/s 6.0.0 - 6.0...

CVE-2024-22120 Time Based SQL Injection in Zabbix Server Audit Log

Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection...

CVE-2024-22120 Time Based SQL Injection in Zabbix Server Audit Log

Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection...