216 matches found
SharpStrike
SharpStrike SharpStrike 是一款用 C 编写的后渗透工具，可使用 CIM 或 WMI 查询远程系统。它可以使用提供的凭据或当前用户的会话。 注意：某些命令会结合 PowerShell 与 WMI 使用，在 --show-commands 命令中以 标注。 简介 SharpStrike 是对 @MattGrandy 的 CIMplant 和 @christruncer 的 WMImplant 的 C 重写和扩展。 SharpStrike 允许您收集远程系统的数据、执行命令、外泄数据等。该工具支持通过 Windows Management Instrumentation...
ossem-power-up
OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency on the strengths and weaknesses of your log sources Provide an easy way to...
CVE-2025-68013
Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce authnet-cim-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Authorize.Net CIM for WooCommerce: from n/a through = 2.1.2...
CVE-2025-68013
Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce authnet-cim-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Authorize.Net CIM for WooCommerce: from n/a through = 2.1.2...
PT-2026-4057
Name of the Vulnerable Software and Affected Versions cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce versions through 2.1.2 Description The Payment Gateway Authorize.Net CIM for WooCommerce contains a flaw related to incorrectly configured access control security levels,...
WordPress plugin Payment Gateway Authorize.Net CIM for WooCommerce has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
MiracleLinux 4 : sblim-cim-client2-2.1.3-2.AXS4 (AXSA:2012-596:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-596:01 advisory. The purpose of this package is to provide a CIM Client Class Library for Java applications. It complies to the DMTF standard CIM Operations over HTTP and...
CVE-2023-4344
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection...
CVE-2008-7230
Unspecified vulnerability in Small Footprint CIM Broker SFCB before 1.2.5 has unknown impact and attack vectors...
CVE-2023-25681
LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID...
EUVD-2006-4670
Malware in sbrugna...
EUVD-2008-0505
Malware in sbrugna...
EUVD-2020-3057
Malware in sbrugna...
EUVD-2018-18391
Malware in sbrugna...
EUVD-2012-2321
Malware in sbrugna...
EUVD-2019-17224
Malware in sbrugna...
EUVD-2020-3053
Malware in sbrugna...
EUVD-2008-7188
Malware in sbrugna...