Back to directory

WRITEUP #1944

Checkmk: Remote Code Execution by Chaining Multiple Bugs (3/3)

RCECode injectionSSRFLine Feed injectionArbitrary file readAuthentication bypassSecurity code review

by@scryh_(Stefan Schiller)

Program

Checkmk

Published

Nov 15, 2022

Added to HackDex

Nov 17, 2022

Read Full Writeuphttps://blog.sonarsource.com/checkmk-rce-chain-3/

▸ RELATED WRITEUPS

Spip Preauth RCE 2024: Part 1, The Feather

RCECode injection

Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!

RCEConfusion attack

Studying 0days: How we hacked Anki, the world's most popular flashcard app

RCEComponents with known vulnerabilities

We hacked Anki - 0 day exploit from studying someone elses flashcards

RCEComponents with known vulnerabilities

Vulnerabilities in Open Source C2 Frameworks

RCEOS command injection

Built with ❤️ by Shubham Rawat