2192 matches found
Astra Linux – Vulnerability in Zabbix
The URL validation scheme receives input from a user and then parses it to identify its various components. This validation scheme ensures that all URL components comply with internet standards...
analise-vulnerabilidades-zabbix-notebooklm
🛡️ SQLi Vulnerability Analysis in Zabbix with NotebookLM Thematic Notebook developed as a deliverable for the DIO Project Challenge Using NotebookLM as an active AI tool for curation, synthesis, and organization of knowledge in Cybersecurity 📋 Table of Contents Context and Objectives Source...
Zabbix - SAML SSO Authentication Bypass
When SAML SSO authentication is enabled non-default, session data can be modified by a malicious actor because a user login stored in the session was not verified. id: CVE-2022-23131 info: name: Zabbix - SAML SSO Authentication Bypass author: For3stCo1d,spac3wh1te severity: critical description:...
zabbix-template-CVE-2020-1472
zabbix-template-CVE-2020-1472 Modèle Zabbix pour surveiller les événements de l'Observateur d'événements Windows liés à la vulnérabilité d'élévation de privilèges Netlogon - CVE-2020-1472. Surveille les ID d'événements 5827, 5828 & 5829...
CVE-2024-42327_Zabbix_SQLi
🛡️ Zabbix 7.0.0 SQL Injection Exploit Script A Python script to exploit a Zabbix 7.0.0 authenticated SQL injection vulnerability, supporting multiple modes of action including user data extraction, session token leaks, remote command execution RCE, and custom query injection. ⚠️ DISCLAIMER: This...
CVE-2022-23131
Уязвимость обхода аутентификации SAML SSO в Zabbix CVE-2022-23131 Окружение и PoC для CVE-2022-23131 Окружение Вы можете развернуть Zabbix с SAML SSO, следуя шагам в Окружение Zabbix для CVE-2022-23131. PoC PoC был модифицирован на основе jweny Использование: root@kitploit: go run poc.go check -t...
CVE-2019-17382-EXPLOIT
CVE-2019-17382 - Contournement d'authentification Zabbix Une vulnérabilité critique découverte dans les versions de Zabbix jusqu'à 4.4. Le problème réside dans le fichier zabbix.php lors de l'accès à l'action dashboard.view avec dashboardid=1. Elle permet aux attaquants de contourner la page de...
Astra Linux – Vulnerability in Zabbix
A authenticated user can create a link containing XSS payloads for action pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page, and can make arbitrary modifications to the contents of the page displayed to the victim. This attack can be...
Astra Linux – Vulnerability in Zabbix
A authenticated user can create a link containing reflected JavaScript code on it for the discovery page and send it to other users. The payload can only be executed with a known CSRF token value of the victim, which is changed periodically and is difficult to predict...
Astra Linux – Vulnerability in Zabbix
A Zabbix administrator can inject arbitrary SQL code during the automatic removal of hosts by inserting malicious SQL statements into the 'Visible name' field...
Astra Linux – Vulnerability in Zabbix
JavaScript preprocessing can be exploited by attackers to gain access to the file system read-only access on behalf of the user “zabbix” on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data...
Astra Linux – Vulnerability in Zabbix
An attacker who has the privilege to configure Zabbix items can use the icmpping function, along with additional malicious commands, to execute arbitrary code on the current Zabbix server...
Astra Linux – Vulnerability in Zabbix
A authenticated user can create a link containing reflected JavaScript code for the graphs page and send it to other users. The payload can only be executed with a known CSRF token value of the victim, which is changed periodically and is difficult to predict...
Astra Linux – Vulnerability in Zabbix
Within Zabbix, users have the ability to directly modify memory pointers in the JavaScript engine...
Astra Linux – Vulnerability in Zabbix
A regular Zabbix user without access to the Monitoring - Problems view can still call the problem.view.refresh action, and thus still retrieve a list of active problems...
Astra Linux – Vulnerability in Zabbix
A stored XSS vulnerability has been detected in the Zabbix web application, specifically in the Maps element, when a URL field contains spaces before the URL...
Astra Linux – Vulnerability in Zabbix
The HttpRequest object allows you to retrieve the HTTP headers from the server’s response after sending a request. The issue is that the returned strings are created directly from the data sent by the server and are not properly encoded for JavaScript. This enables the creation of internal string...
Astra Linux – Vulnerability in Zabbix
A authenticated user can create a link containing reflected JavaScript code on its own pages and send it to other users. The payload can only be executed with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. Malicious code has access to all the sa...
Astra Linux – Vulnerability in Zabbix
There is a vulnerability related to arbitrary file reading in the Zabbix Web Service Report Generation module, which listens on port 10053. The service does not perform proper validation on URL parameters before reading the files...