CVE-2022-23131

CVE-2022-23131 Zabbix Frontend Authentication Bypass Vulnerability Description This script is an exploit for CVE-2022-23131 , a vulnerability in the Zabbix SSO Single Sign-On mechanism. The vulnerability allows an attacker to bypass authentication via a specially crafted zbxsession cookie, giving...

EUVD-2024-36350

Malicious code in bioql PyPI...

CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466

CVE-2024-36466 describes a flaw in Zabbix where an attacker can forge the zbx_session cookie, enabling sign‑in with admin permissions via the frontend authentication mechanism. The description and multiple third‑party advisories (e.g., Zabbix references, Tencent/Tenable Nessus plugins, and NCSC a...

CVE-2024-36466 Unauthenticated Zabbix frontend takeover when SSO is being used

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466: Authentication Bypass by Spoofing

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...