Enigma NMS < 65.0.0 - Authenticated OS Command Injection

An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an authenticated attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action. id:...

Enigma

Enigma マルチプラットフォームペイロードドロッパー。 ビデオデモ クローン root@kitploit: git clone https://github.com/UndeadSec/Enigma.git 実行 root@kitploit: cd Enigma root@kitploit: python enigma.py または python3 enigma3.py 免責事項 教育目的のみで使用すること Enigmaの使用は、エンドユーザーの完全な責任です。開発者は一切の責任を負わず、このプログラムによって引き起こされた誤用や損害についても責任を負いません。...

Enigma-

Enigma Ghidra 分析核心（SoftwareModeling + Utility）的 C++ 重新实现，去除了 Java/JVM 依赖。专为 AI 集成、性能和可嵌入性而构建。Enigma Engine 项目的一部分。 Enigma Engine Ghidra 分析核心的 C++ 重新实现——无 JVM，无 Java，完全掌控。 这是什么？ Ghidra 是 NSA 用 Java 构建的强大逆向工程框架。 Enigma 是用现代 C++ 对其分析核心 进行的从零重写，旨在实现： 可嵌入 — 作为库链接到任何项目中 AI 就绪 — 为 ML/AI 集成提供清晰的接口 快速 — 无...

Hack-The-Box-Enigma-Findings-Report

🛡️ Hack The Box - Enigma 发现报告 📋 概述 此仓库包含针对 Hack The Box 机器 Enigma 的全面渗透测试报告。 🔍 主要发现 不安全的 NFS 共享暴露入职文档 - 中等级别 通过未加密电子邮件内容泄露内部凭据 - 中等级别 员工 IMAPS 账户之间重复使用密码 - 高风险级别 OpenSTAManager 经过身份验证的操作系统命令注入 CVE-2025-69212 - 严重级别 Web 应用配置中的明文数据库凭据 - 中等级别 弱用户密码导致离线哈希破解 - 高风险级别 OliveTin 未经身份验证的根自动化 - 参数类型命令注入 -...

Enigma

Enigma Engine 一个受 Ghidra 分析流水线启发的原生 C++ 逆向工程引擎。 Enigma 去除了 JVM 依赖，提供了一个独立的分析核心，可直接嵌入、扩展并与原生工具及 AI 系统集成。 当前状态 Enigma 正处于积极开发阶段，目前已具备功能完整的端到端分析流水线。 分析引擎 PE 和 ELF 二进制加载 基于 Capstone 的 x86/x64 反汇编 使用 Ghidra 原生反编译器库生成 Pcode 函数检测，在测试的 Windows 二进制上召回率约 97% C 反编译 带 Windows API 签名的类型恢复（1400+ 原型）...

CVE-2019-16062

NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database. It is possible for an attacker to expose unencrypted sensitive data...

CVE-2019-16064

NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files and directories stored outside of the web root folder. By exploiting this vulnerability, it is possible for an attacker to list operating-system directory...

CVE-2019-16068

A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious managefiles.cgi request. This can be triggered via XSS or an IFRAME tag included within the site...

CVE-2019-16065

A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to expose and compromise the web server, expose database tables and values, and potentially execute system-based commands as the mysql user...

CVE-2019-16061

A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged user with access to the system to read sensitive data e.g., .htpasswd and create/modify/delete content e.g., under /var/www/html/docs with...

CVE-2019-16070

A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through web application form inputs...

CVE-2019-16069

A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through the SNMP protocol...

CVE-2019-16063

NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an attacker to expose unencrypted sensitive data...

CVE-2019-16072

An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action...

EUVD-2019-6932

Malware in sbrugna...

EUVD-2019-6931

Malware in sbrugna...

EUVD-2019-6927

Malware in sbrugna...

EUVD-2019-6930

Malware in sbrugna...

EUVD-2006-2730

Malware in sbrugna...

EUVD-2018-1824

Malware in sbrugna...