CVE-2024-43468

Microsoft Configuration Manager ConfigMgr / SCCM 2403 Unauthenticated SQL injections CVE-2024-43468 exploit This script exploits the CVE-2024-43468 that allows an unauthenticated attacker, with network access to a Management Point, to execute arbitrary SQL queries on the site database. As queries...

SCCMSecrets

SCCMSecrets SCCMSecrets.py is an SCCM policies exploitation tool. It goes beyond NAA credentials extraction, and aims to provide a comprehensive approach regarding SCCM policies exploitation. The tool can be executed from various levels of privileges, and will attempt to uncover potential...

sccm_sql_backdoor

sccmsqlbackdoor A proof‑of‑concept tool that implants a controlled backdoor into a Management Point stored procedure, enabling indirect SQL execution through a legitimate MP HTTP service. Installation You can install by cloning the repository and installing the dependencies. $ git clone...

CcmMessagingBackdoor

CcmMessagingBackdoor Proof of Concept tooling to build and install a rogue CcmMessaging service to maintain access on a Management Point Usage Compile and install the rogue COM service on the Management Point Compile PS C:\ C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe /t:library...

CUSTOS: Toward Forensic-Ready Zero Trust at the Capture-Containment Boundary

Zero Trust ZT replaces implicit trust with continuous verification, but mutual TLS, ephemeral workloads, identity-centric control, and automated remediation reduce payload visibility, weaken IP-based attribution, and shrink the window for acquiring volatile evidence. We propose CUSTOS, a...

CVE-2026-70560: Improper Neutralization of Input During Web Page Generation

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

Iris ID IrisAccess iCAM4000iCAM7000 - Hard-Coded Credentials Remote Shell Access

Iris ID IrisAccess iCAM4000iCAM7000 - Hard-Coded Credentials Remote Shell Access Iris ID IrisAccess iCAM4000/iCAM7000 Hardcoded Credentials Remote Shell Access Vendor: Iris ID, Inc. Product web page: http://www.irisid.com http://www.irisid.com/productssolutions/irisaccesssystem/irisaccess4000/...

Microsoft System Center Configuration Manager Management Point Detection

The remote service is a Management Point for a Microsoft System Center Configuration Manager server. It is used by client agents to communicate with the Configuration Manager. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51836; scriptversion"1.9";...