Two SQL Injection Flaws in Zabbix, and Why the API Account Is the Real Perimeter Monitoring systems are the most trusted readers in an estate. Zabbix agents report from every host, the server stores what they report, and the front end renders it to whoever holds a session. Two SQL injection issues disclosed in 2024 show what that trust is worth... Weiterlesen: Two SQL Injection Flaws in Zabbix, and Why the API Account Is the Rea…
Intelligence View
⚡ tsecurity.de Intelligence
Two SQL Injection Flaws in Zabbix, and Why the API Account Is the Real Perimeter
Two SQL Injection Flaws in Zabbix, and Why the API Account Is the Real Perimeter Monitoring systems are the most trusted readers in an estate. Zabbix agents…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
29 Quellen
CVE-2026-90154 | Linux Kernel ksmbd ksmbd_all_conn_set_status race condition (WID-SEC-2026-3444)
28 weitere Quellen
VVulDB Updates2 uur geledenCVE-2026-90155 | Linux Kernel up to 7.2.5 ksmbd __ksmbd_close_fd flc_blocked_requests use after free (WID-SEC-2026-3444) VVulDB Updates2 uur geledenCVE-2026-90156 | Linux Kernel up to 7.2.5 ksmbd vfs_lock_file conn null pointer dereference (WID-SEC-2026-3444) VVulDB Updates2 uur geledenCVE-2026-90159 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 BPF _bpf_setsockopt/_bpf_getsockopt race condition (WID-SEC-2026-3444) VVulDB Updates2 uur geledenCVE-2026-90158 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 nfcon nfcon_device deadlock (WID-SEC-2026-3444) VVulDB Updates2 uur geledenCVE-2026-90161 | Linux Kernel up to 6.18.51/7.2.5 erofs out-of-bounds (WID-SEC-2026-3444) VVulDB Updates2 uur geledenCVE-2026-90162 | Linux Kernel up to 7.2.5 ksmbd smb2_lock use after free (WID-SEC-2026-3444)
+22
23 Quellen
CVE-2025-67526 | ThimPress Sailing Plugin up to 4.4.6 on WordPress php file inclusion
22 weitere Quellen
VVulDB Updates6 uur geledenCVE-2025-66532 | Mikado-Themes Powerlift Plugin up to 3.2.1 on WordPress authorization VVulDB Updates6 uur geledenCVE-2025-67531 | trippleS Turitor Plugin up to 1.5.3 on WordPress php file inclusion VVulDB Updates6 uur geledenCVE-2025-67529 | Opal_WP Fashion Plugin up to 5.3.0 on WordPress php file inclusion VVulDB Updates6 uur geledenCVE-2025-67527 | trippleS Digiqole Plugin up to 2.2.7 on WordPress php file inclusion VVulDB Updates6 uur geledenCVE-2025-67525 | Opal_WP ekommart Plugin up to 4.3.1 on WordPress php file inclusion VVulDB Updates6 uur geledenCVE-2025-67521 | Select-Themes Select Core Plugin up to 2.6 on WordPress php file inclusion
+16
14 Quellen
CVE-2026-106062 | GIMP DDS Loader out-of-bounds write (EUVD-2026-93983 / Nessus ID 371935)
13 weitere Quellen
VVulDB Updates5 uur geledenCVE-2022-47881 | Foxit PDF Reader/PDF Editor up to 11.2.1.53537 out-of-bounds (EUVD-2022-50638) VVulDB Updates3 uur geledenCVE-2022-47940 | Linux Kernel up to 5.18.17 ksmbd fs/ksmbd/smb2pdu.c smb2_write information disclosure (EUVD-2022-50673 / Nessus ID 249854) VVulDB Updates3 uur geledenCVE-2026-108127 | Microsoft Windows up to Server 2025 DNS Server out-of-bounds (EUVD-2026-100446) VVulDB Updates3 uur geledenCVE-2026-97844 | Microsoft Windows up to Server 2025 out-of-bounds (EUVD-2026-100445) VVulDB Updates3 uur geledenCVE-2026-97842 | Microsoft Windows up to Server 2025 DNS Server out-of-bounds (EUVD-2026-100443) VVulDB Updates3 uur geledenCVE-2026-97843 | Microsoft Windows up to Server 2025 DNS Server out-of-bounds (EUVD-2026-100444)
+7
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4294008/sichere-programmierung/two-sql-injection-flaws-in-zabbix-and-why-the-api-account-is-the-real-perimeter/