651 matches found
VMware_ESXI_OpenSLP_PoCs
VMwareESXIOpenSLPPoCs CVE-2020-3992 & CVE-2019-5544 Probado en ESXI instalado en VMware Workstation. Si está en una máquina real, es posible que necesite cambiar el campo srvtype service:VMwareInfrastructure...
CVE-2021-21974_vuln_dectection
Detector de Vulnerabilidad CVE-2021-21974 Una herramienta de seguridad basada en Python para detectar la vulnerabilidad CVE-2021-21974 en implementaciones de SLP Service Location Protocol, dirigida específicamente a sistemas VMware ESXi. Esta herramienta realiza una detección segura, sin...
Vmware-ESXI
CVE-2024-37085 subida de shell sin autenticación hasta administrador completo en hipervisores ESXi unidos a un dominio. Descargar ESXIVORTEX Detalles: un bypass de autenticación que permite la subida de un shell en el contexto de vpxuser, otorgando permisos administrativos completos en hipervisor...
CVE-2021-21974
CVE-2021-21974 POC para CVE2021-21974 VMWare ESXi RCE Exploit...
CVE-2021-21974
CVE-2021-21974 PoC - VMware ESXi RCE Exploit Descripción Este repositorio contiene un Proof of Concept PoC para la vulnerabilidad CVE-2021-21974 , una vulnerabilidad de ejecución remota de código RCE en el servicio OpenSLP de VMware ESXi. La explotación exitosa puede permitir que un atacante no...
cve-2021-21994_POC
CVE-2021-21994 — VMware ESXi SFCB Authentication Bypass — Lab Research Kit...
ESXi_ransomware_bitcoinWallets
Background https://blog.ovhcloud.com/ransomware-targeting-vmware-esxi/ https://twitter.com/ValeryMarchive/status/1621528499315150849 Ransomnote example: Victims so far Wallets used so far 1. 1N8v8sRa2RdYq4xUUwpEePFT34TMzesPUx 2. 15vx9oDSQTJuAoYCL1VwzVBDgKYexRHpyC 3...
ESXiArgs-Recover
ESXiArgs-Recover ESXiArgs-Recover is a tool to allow organizations to attempt recovery of virtual machines affected by the ESXiArgs ransomware attacks. CISA is aware that some organizations have reported success in recovering files without paying ransoms. CISA compiled this tool based on publicly...
IoC_Attack_ESXi_Feb_2023
IoCAttackESXiFeb2023 Collection of IoCs available and related to attacks on ESXi infrastructures that occurred as of Friday February 3, 2023. News Here are some references regarding the attack: https://www.cert.ssi.gouv.fr/alerte/CERTFR-2023-ALE-015/...
CVE-2019-5544_CVE-2020-3992
Escáner para servicios SLP CVE-2019-5544 CVE-2020-3992 Script en Python que implementa el protocolo SRVLOC/SLP para escanear servicios OpenSLP habilitados. Puede resultarle útil mientras busca sistemas afectados por CVE-2019-5544, CVE-2020-3992 o CVE-2021-21974... Más información sobre la...
CVE-2021-21974
CVE-2021-21974 VMware ESXi OpenSLP Desbordamiento de montón PoC de ejecución remota de código Autor: Aiyakami Resumen CVE-2021-21974 es una vulnerabilidad de desbordamiento de montón en el servicio OpenSLP de VMware ESXi. Un atacante no autenticado puede enviar paquetes especialmente diseñados al...
PT-2026-65829
Name of the Vulnerable Software and Affected Versions VMware ESX affected versions not specified Description An out-of-bounds write issue exists in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine using the VMXNET3 adapter can exploi...
PT-2026-65827
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service DoS condition of the host process. On Workstation...
PT-2026-65833
Name of the Vulnerable Software and Affected Versions VMware vCenter versions prior to 9.1.0.0300 VMware vCenter versions prior to 9.0.2.0100 VMware vCenter versions prior to 8.0 U3k VMware vCenter versions prior to 8.0 U2f Description VMware vCenter contains a directory traversal flaw in the...
PT-2026-65832
Name of the Vulnerable Software and Affected Versions VMware vCenter affected versions not specified Description An authentication bypass exists in the VMware Directory Service. A malicious actor with network access to vCenter can exploit this flaw to bypass authentication mechanisms and gain...
CVE-2026-20879
Out-of-bounds write for the IntelR Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result...
CVE-2025-62627
An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...
CVE-2025-62624
A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
