PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← Back | CVE Intelligence Hub

CVE-2024-22116

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2024-22116.

Coverage Span
2025-07-03
Reports
2 related reports

Associated Reports & Timeline

1.
RCE via Pacotes MKP no Checkmk - Execução Remota de Comandos via Interface Web
yokai.hakaisecurity.io | vulnerability | | Original ↗ | .md | #rce | #vulnerability-research | #research
Resumo Nesta pesquisa conduzida por mim, e pelo Lucas Katashi, identificamos duas vulnerabilidades críticas no Checkmk Enterprise Edition 2.4.0p2, que permitem a execução remota de comandos (RCE) através da funcionalidade de extensão por pacotes .mkp. A exploração exige apenas acesso administrativo à interface web do Checkmk e resulta na execução automática de código Python ao […]
2.
RCE via MKP Packages in Checkmk - Remote Command Execution through the Web Interface
yokai.hakaisecurity.io | vulnerability | | Original ↗ | .md | #rce | #vulnerability-research | #research
Abstract In this research conducted by me and Lucas Katashi, we identified two critical vulnerabilities in Checkmk Enterprise Edition 2.4.0p2 that allow Remote Command Execution (RCE) via the .mkp extension package feature. Exploitation only requires administrative access to the Checkmk web interface and results in automatic execution of Python code when visiting any page that […]