PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-22116] RCE via MKP Packages in Checkmk - Remote Command Execution through the Web Interface

yokai.hakaisecurity.io | vulnerability | CVE-2024-22116 | #rce | #vulnerability-research | #research
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Abstract In this research conducted by me and Lucas Katashi, we identified two critical vulnerabilities in Checkmk Enterprise Edition 2.4.0p2 that allow Remote Command Execution (RCE) via the .mkp extension package feature. Exploitation only requires administrative access to the Checkmk web interface and results in automatic execution of Python code when visiting any page that […]
CVE
CVE-2024-22116
Published
Collected

Related coverage

vulnerability · yokai.hakaisecurity.io
RCE via Pacotes MKP no Checkmk - Execução Remota de Comandos via Interface Web
Resumo Nesta pesquisa conduzida por mim, e pelo Lucas Katashi, identificamos duas vulnerabilidades críticas no Checkmk Enterprise Edition 2.4.0p2, que permitem a execução remota de comandos (RCE) através da funcionalidade de extensão por pacotes .mkp. A exploração exige apenas acesso administrativo à interface web do Checkmk e resulta na execução automática de código Python ao […]
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
vulnerability · yokai.hakaisecurity.io
OsCommerce v4 RCE: Unveiling the file upload bypass threat
In my recent research, I identified a critical vulnerability in osCommerce v4, specifically a Remote Code Execution (RCE) vulnerability enabled by bypassing file upload restrictions. I’ve always enjoyed testing file upload bypass techniques in my assessments. Vulnerabilities Identified in OsCommerce Version 4 The CVE-2024-22724 was assigned to the discovery of this vulnerability. The issue […]
Back