An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside i

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received s