CVE-2022-23131

CVE-2022-23131 Vulnerabilidad de omisión de autenticación del frontend de Zabbix Descripción Este script es un exploit para CVE-2022-23131 , una vulnerabilidad en el mecanismo SSO Inicio de sesión único de Zabbix. La vulnerabilidad permite a un atacante omitir la autenticación mediante una cookie...

EUVD-2024-36350

Malicious code in bioql PyPI...

CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466 Unauthenticated Zabbix frontend takeover when SSO is being used

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466

CVE-2024-36466 describes a flaw in Zabbix where an attacker can forge the zbx_session cookie, enabling sign‑in with admin permissions via the frontend authentication mechanism. The description and multiple third‑party advisories (e.g., Zabbix references, Tencent/Tenable Nessus plugins, and NCSC a...