CVE-2024-42327

#exploit 1. CVE-2024-12425, CVE-2024-12426: LibreOffice Path Traversal https://t.co/6gInUfeAFA 2. CVE-2024-36412: Using XSS filters against XSS filters - Unexpected SQLI/RCE https://t.co/xh9NiHmgqa 3. CVE-2024-42327: Zabbix Privilege Escalation -> RCE https://t.co/jQT6L9XMLy

Zabbix CVE-2024-42327 PoC https://t.co/elskVCkVob

Zabbix-CVE-2024-42327 RCE PoC SQL injection vulnerability of Zabbix server https://t.co/IJqh8Hs5m5… #ciberseguridad #hacking #FelizSabado #2025YearOfImranKhan https://t.co/g2UTNNEmbx

NSFOCUS CERT detects Zabbix security leak CVE-2024-42327 : Announcement and fix for Zabbix server SQL injection vulnerability. https://t.co/fsxLNWuJKl https://t.co/l116DwO3Vl

Zabbix-CVE-2024-42327 RCE PoC SQL injection vulnerability of Zabbix server https://t.co/kkFDTCp0lI https://t.co/zqrLD3J2RV

“Zabbix”də kritik boşluq (CVE-2024-42327) aşkar olunub. #ETX #certaz #cybersecurity #kibertəhlükəsizlik #xəbərdarlıq https://t.co/FDgoyKk3G0

Zabbix の脆弱性 CVE-2024-42327 (CVSS：9.9)：PoCエクスプロイトが登場 https://t.co/hYiNvyJhMg この Zabbix の脆弱性ですが、第一報は 2024/11/27 の「Zabbix の SQLi の脆弱性 CVE-2024-42327 (CVSS 9.9) が FIX：ただちにパッチを！」です。そして、わずか数日の間に、PoC… https://t.co/8qitVviFOQ

🔴 Alerta de Seguridad: Se ha detectado una vulnerabilidad crítica en Zabbix (CVE-2024-42327), que podría comprometer la integridad de los datos mediante inyección SQL. 🚨 Es momento de tomar acción: revisa, actualiza y protege tus sistemas. La ciberseguridad no espera.… https:/

GitHub - aramosf/cve-2024-42327: cve-2024-42327 ZBX-25623 https://t.co/Be3GCsqvkA

Kritikus sérülékenységet találtak a Zabbix-ban A Zabbix egy népszerű nyílt forráskódú hálózat monitorozó szoftver, ami vállalati környezetekben való használatra is alkalmas. Zabbix monitorozó hiba sérülékenység CVE CVE-2024-42327 CVE-2024-36462 https://t.co/EXrBNYbea5

GitHub - compr00t/CVE-2024-42327: PoC for CVE-2024-42327 / ZBX-25623 https://t.co/doZdtl0yfr

ZabbixフロントエンドにおけるSQLインジェクション脆弱性（SQLi）CVE-2024-42327 CVSS 9.9 Critical 攻撃者がCUserクラス内のaddRelatedObjects関数を通じて悪意のあるSQLクエリを注入できる。権限の低いアカウント（デフォルトのユーザーロールなど）でも攻撃可能です。 https://t.co/IfZWWb2oIb https://t.co/fjLoOQyWi4

Zabbix server is vulnerable to a critical severity flaw tracked as CVE-2024-42327. The vulnerability has a CVSS score of 9.9. Successful exploitation of the vulnerability may allow attackers to escalate privileges and gain complete control of vulnerable Zabbix servers. Márk… http

Zabbixの脆弱性CVE-2024-42327（CVSSスコア9.9）について、PoC（攻撃の概念実証コード）が公開された。ZabbixフロントエンドでCUser.getメソッドから呼ばれるCUserクラスのaddRelatedObjects関数における脆弱性で、非管理者ユーザが悪用可能なSQLインジェクション。 https://t.co/FpOhaYC7IP

PoC Exploit Releases for Critical Zabbix Vulnerability – CVE-2024-42327 (CVSS 9.9) https://t.co/foSyrL5ewS

PoC Exploit Releases for Critical Zabbix Vulnerability - CVE-2024-42327 (CVSS 9.9) Security researcher Alejandro Ramos has published a detailed technical analysis and proof-of-concept (PoC) exploit code for CVE-2024-42327 https://t.co/DxbTDLdrA9

GitHub - compr00t/CVE-2024-42327: PoC for CVE-2024-42327 / ZBX-25623 - https://t.co/MyBWurgkCc

CVE-2024-42327 alert 🚨 Zabbix : SQL injection Anyone with an API access can exploit this vulnerability: An SQLi exists in the CUser class in the addRelatedObjects function, which is called from the CUser.get function. Find out more : https://t.co/k32SiEOp5x #SQL #Zabbix

⚠️⚠️ CVE-2024-42327 (CVSS 9.9): Critical SQL Injection Vulnerability Found in Zabbix 🎯84k+ Results are found on the https://t.co/pb16tGYaKe nearly year. 🔗FOFA Link:https://t.co/nDXlleoDsf FOFA Query:app="ZABBIX-Monitoring" 🔖Refer: https://t.co/8mv6VaNv76 #OSINT #FOFA… htt

CVE-2024-42327 (CVSS 9.9): Critical SQL Injection Vulnerability Found in Zabbix Query" HUNTER:/product.name="Zabbix" SHODAN: http.component:"Zabbix" FOFA: app="ZABBIX-Monitoring"

🚨Alert🚨CVE-2024-42327 (CVSS 9.9): Critical SQL Injection Vulnerability Found in Zabbix 📊 143K+ Services are found on https://t.co/ysWb28BTvF nearly year. 🔗Hunter Link:https://t.co/adWkCns9i7 👇Search Query HUNTER:/product.name="Zabbix" SHODAN: http.component:"Zabbix" FOFA:… h

Zabbix Server Critical SQL Injection Vulnerability (CVE-2024-42327) – Qualys ThreatPROTECT #informationsecurity #cybersecurity https://t.co/lhlfl93BE3

ZABBIX SQL injection in user.get API (CVE-2024-42327 CVSS 9.9) https://t.co/k4dTebCVJi

🚨 Critical SQL Injection Vulnerability in Zabbix Zabbix's SQL injection vulnerability (CVE-2024-42327) poses a severe risk with a CVSS score of 9.9. Affects versions 6.0.0–6.0.31, 6.4.0–6.4.16, 7.0.0. Exploitable by non-admin accounts with API access.#CyberSecurity #SQLi

CVE-2024-42327 @zabbix A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from…

Zabbix tool affected by CVE-2024-42327 #ZABBIX #CVE-2024-42327 #Sqlinjection https://t.co/EBfNNckDf9

🚨Vulnerabilidad crítica de inyección SQL en la API de ➡️ Zabbix ⚠️ CVE-2024-42327 https://t.co/4YKIODy79o https://t.co/qB7W7BNfbd

Uwaga na "krytyczny SQL injection" w Zabbix. CVE-2024-42327 Na szczęście wykorzystanie wymaga posiadania konta (dowolnego) użytkownika w Zabbix https://t.co/6BQQaw2rSM

【緊急】Zabbix の脆弱性情報 CVE-2024-42327 (CVSS 9.9) https://t.co/JV4FglcwWP

یک آسیب پذیری با شدت بحرانی و امتیاز 9.9 و با شناسه CVE-2024-42327 در #Zabbix اصلاح شده. این آسیب پذیری از نوع #SQLi هستش و امکان افزایش امتیاز و کنترل Zabbix رو به مهاجم میده. آسیب پذیری در نقطه پایانی user.get API هستش. https://t.co/pk9CcmkxdS

CVE-2024-42327: SQL Injection in Zabbix, 9.9 rating 🔥 The discovered vulnerability allows any Zabbix user to perform Privilege Escalation via SQL injection. Search at https://t.co/hv7QKSqxTR: 👉 Link: https://t.co/LSM2JnwACB #cybersecurity #vulnerability_map #zabbix https://t

CVSS 9.9!! とりあえずユーザーロールで user.get API をdenyした。 Zabbix SQL injection in user.get API (CVE-2024-42327) https://t.co/X5Ysztndzp

CVE-2024-42327 (CVSS 9.9): Critical SQL Injection Vulnerability Found in Zabbix https://t.co/TTJUIF7XQk

Zabbix（ITインフラ監視製品）に重大(Critical)な脆弱性。CVE-2024-42327はCVSSスコア9.9でuser.get APIエンドポイントにおけるSQLインジェクション。悪用には一般ユーザーかそれ以上のアクセス権が必要。修正版が提供されている。 https://t.co/Ze9GqVCyET

CVE-2024-42327 (CVSS 9.9): Critical SQL Injection Vulnerability Found in Zabbix Learn about the critical SQL injection flaw in #Zabbix and its potential impact on monitoring data and system security. https://t.co/RT276nBYA3

[CVE-2024-42327: CRITICAL] Zabbix frontend vulnerability alert: Non-admin user accounts with API access can exploit SQLi in CUser class, potentially breaching security. Take precautions! #cybersecurity#cybersecurity,#vulnerability https://t.co/aDNGGZmbk7 https://t.co/hWc2isCOLY

CVE-2024-42327 A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exist… https://t.co/c0fCnISAlx