openwisp-controller

openwisp-controller .. image:: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml/badge.svg :target: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml :alt: CI build status .. image:: https://coveralls.io/repos/openwisp/openwisp-controller/badge.svg...

Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468

CVE-2024-38124 和 CVE-2024-43468 的详细分析与缓解策略 CVE-2024-38124 和 CVE-2024-43468 的详细分析与脚本缓解策略 CVE-2024-38124：Windows Netlogon 技术利用背景： 在实际场景中，拥有网络访问权限的攻击者可以通过向域控制器发送特制的 Netlogon 消息来利用 CVE-2024-38124。这使他们能够冒充网络上的任何计算机，包括域控制器本身。攻击者可以提升权限，从而可能完全控制 Active Directory AD 环境，进而未经授权访问敏感信息或在整个网络部署恶意软件。 攻击路径示例： 1...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...

sccmhound

SCCMHound SCCMHound es un recolector BloodHound en C para Microsoft Configuration Manager MCM. Si estás buscando una forma de recopilar información de sesiones de BloodHound de los usuarios y equipos de Configuration Manager, ¡esta es la herramienta para ti! Se recomienda encarecidamente importar...

CVE-2025-59213

Exploit de inyección SQL no autenticada CVE-2025-59213 en Microsoft Configuration Manager ConfigMgr / SCCM 2503 Este script explota la vulnerabilidad CVE-2025-59213, que permite a un atacante no autenticado con acceso de red a un punto de administración Management Point ejecutar consultas SQL...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

CVE-2026-60879

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Configuration Manager. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise PeopleSoft Enterprise...

EUVD-2026-61455

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Configuration Manager. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise PeopleSoft Enterprise...

PT-2026-77411

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the Configuration Manager component allows a low privileged attacker with network access via SQL to compromise the system. Successful...

CVE-2024-58023

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information...

CVE-2024-58023

Technical details are not publicly available in the provided documents. Monitor Bosch security advisories for updates on CVE-2024-58023.

EUVD-2024-55695

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server, which impacts IBM Tivoli Netcool Configuration Manager

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration Manager version 6.4.2. Multiple vulnerabilities were addressed in IBM WebSphere Application Server. Vulnerability Details CVEID:CVE-2026-11541 DESCRIPTION: IBM WebSphere Application Server 9.0, and...

CVE-2026-47301

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-47301 Configuration Manager Elevation of Privilege Vulnerability

...

CVE-2026-47301 Configuration Manager Elevation of Privilege Vulnerability

...

CVE-2026-47301

Technical details about CVE-2026-47301 are not publicly available in the provided documents. No affected products, components, versions, or fixes are specified here. Monitor for updates.

Configuration Manager Elevation of Privilege Vulnerability

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

PT-2026-58695

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager version 2509 Description Improper access control allows an authorized attacker to elevate privileges over a network. This issue can be part of an exploit chain involving broken access, CAB arbitrary-write path...

Security Bulletin: Multiple Security Vulnerabilities in Apache-MINA libraries used by IBM Tivoli Netcool Configuration Manager

Summary Multiple vulnerabilities in the third-party Apache-MINA libraries used by IBM Tivoli Netcool Configuration Manager have been addressed. Vulnerability Details CVEID:CVE-2026-42778 DESCRIPTION: The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the original...