CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503 Unauthenticated SQL injection CVE-2025-59213 exploit This script exploits the CVE-2025-59213 vulnerability, which allows an unauthenticated attacker with network access to a Management Point to execute arbitrary SQL queries on the site databas...

RegistryGuard

RegistryGuard - Windows Kernel Registry Filter SDK Native C++ rules for observing and denying selected registry writes under application-owned HKLM\SOFTWARE branches. A small desktop interface explains the matched rule and calling process. !IMPORTANT Full version and commercial licensing Discord...

openwisp-controller

openwisp-controller .. image:: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml/badge.svg :target: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml :alt: CI build status .. image:: https://coveralls.io/repos/openwisp/openwisp-controller/badge.svg...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...

sccmhound

SCCMHound SCCMHound is a C BloodHound collector for Microsoft Configuration Manager MCM. If you're looking for a way to collect BloodHound session information from Configuration Manager's users and computers then this is the tool for you! Highly recommend importing collected data with another...

Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468

Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468 Detailed Analysis and script Mitigation Strategies for CVE-2024-38124 and CVE-2024-43468 CVE-2024-38124: Windows Netlogon Technical Exploitation Context: In a real-world scenario, an attacker with access to the...

CVE-2026-119991

Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network...

EUVD-2026-122126

Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network...

CVE-2026-119991

A weak authentication vulnerability in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-1390 . While the CVSS 3.1 score is 5.9 (Medium) with a high attack complexity, the documents do not provide speci...

Microsoft Configuration Manager Information Disclosure Vulnerability

Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network...

CVE-2026-119991: Microsoft Microsoft Configuration Manager 2603: Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a…

Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network...

KLA91406 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

PT-2026-143976

Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network...

CVE-2026-124436

OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /configuration/manager to redirect other...

CVE-2026-124436 OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources

OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /configuration/manager to redirect other...

CVE-2026-124436 OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources

OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /configuration/manager to redirect other...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

Security Bulletin: IBM Tivoli Netcool Configuration Manager is affected by multiple Bouncy Castle and Apache MINA SSHD vulnerabilities that may cause denial of service, resource exhaustion, cryptographic verification bypass, or authentication issues.

Summary IBM Tivoli Netcool Configuration Manager version 6.4.2 addresses multiple vulnerabilities in Bouncy Castle and Apache MINA SSHD components. These vulnerabilities could allow attackers to cause denial of service, excessive resource consumption, application crashes, bypass cryptographic...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server, which impacts IBM Tivoli Netcool Configuration Manager(ITNCM).

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration ManagerITNCM version 6.4.2. Multiple vulnerabilities were addressed in IBM WebSphere Application Server. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

Security Updates for Microsoft Endpoint Configuration Manager (October 2026)

The Microsoft Endpoint Configuration Manager installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authoriz...