216 matches found
SharpStrike
SharpStrike SharpStrike는 C으로 작성된 사후 침투 도구로, CIM 또는 WMI를 사용하여 원격 시스템을 쿼리합니다. 제공된 자격 증명 또는 현재 사용자 세션을 사용할 수 있습니다. 참고: 일부 명령은 PowerShell과 WMI를 조합하여 사용하며, --show-commands 명령에서 로 표시됩니다. 소개 SharpStrike는 @MattGrandy의 CIMplant와 @christruncer의 WMImplant를 C으로 다시 작성하고 확장한 것입니다. SharpStrike를 사용하면 원격 시스템의 데이터...
ossem-power-up
OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency on the strengths and weaknesses of your log sources Provide an easy way to...
CVE-2025-68013
Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce authnet-cim-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Authorize.Net CIM for WooCommerce: from n/a through = 2.1.2...
CVE-2025-68013
Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce authnet-cim-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Authorize.Net CIM for WooCommerce: from n/a through = 2.1.2...
PT-2026-4057
Name of the Vulnerable Software and Affected Versions cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce versions through 2.1.2 Description The Payment Gateway Authorize.Net CIM for WooCommerce contains a flaw related to incorrectly configured access control security levels,...
WordPress plugin Payment Gateway Authorize.Net CIM for WooCommerce has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
MiracleLinux 4 : sblim-cim-client2-2.1.3-2.AXS4 (AXSA:2012-596:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-596:01 advisory. The purpose of this package is to provide a CIM Client Class Library for Java applications. It complies to the DMTF standard CIM Operations over HTTP and...
CVE-2023-4344
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection...
CVE-2008-7230
Unspecified vulnerability in Small Footprint CIM Broker SFCB before 1.2.5 has unknown impact and attack vectors...
CVE-2023-25681
LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID...
EUVD-2018-18391
Malware in sbrugna...
EUVD-2012-2321
Malware in sbrugna...
EUVD-2006-4670
Malware in sbrugna...
EUVD-2008-0505
Malware in sbrugna...
EUVD-2020-3057
Malware in sbrugna...
EUVD-2008-7188
Malware in sbrugna...
EUVD-2019-17224
Malware in sbrugna...
EUVD-2007-5587
Malware in sbrugna...