CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503 未认证 SQL 注入 CVE-2025-59213 漏洞利用 此脚本利用 CVE-2025-59213 漏洞，该漏洞允许具有网络访问权限的未认证攻击者通过滥用 Discovery Data Manager DDM 的 DuplicateAMTMachineRecord 方法中的 SQL 注入缺陷，在站点数据库上执行任意 SQL 查询。在合并两个硬件 ID 冲突的客户端时，未转义的 HardwareID0 字段被不当处理。 当缺少 KB34503790 时，以下所有 Microsof...

sccmhound

SCCMHound SCCMHound è un collector BloodHound in C per Microsoft Configuration Manager MCM. Se stai cercando un modo per raccogliere le informazioni sulle sessioni di BloodHound dagli utenti e dai computer di Configuration Manager, questo è lo strumento che fa per te! Si consiglia vivamente di...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Cadeia de exploit de prova de conceito que descobri e foi atribuída como CVE-2026-47301 para o Microsoft Configuration Manager SCCM, combinando controle de acesso quebrado, escrita arbitrária de arquivos por travessia de caminho na extração de CAB...

CVE-2026-47301

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

PT-2026-58695

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager version 2509 Description Improper access control allows an authorized attacker to elevate privileges over a network. This issue can be part of an exploit chain involving broken access, CAB arbitrary-write path...

Microsoft Configuration Manager SQL Injection Vulnerability

Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server...

CVE-2025-47179

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-47179

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally...

EUVD-2025-93420

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally...

PT-2025-46451

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager affected versions not specified Description An improper access control issue exists in Microsoft Configuration Manager. This allows an authorized attacker to elevate privileges locally. Recommendations At the...

Microsoft Configuration Manager 访问控制错误漏洞

Microsoft Configuration Manager is a Microsoft solution for managing computers and servers within an organization that helps IT departments keep software up-to-date, set configuration and security policies, and monitor system status. An elevation of privilege vulnerability exists in Microsoft...

CVE-2025-59501

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network...

CVE-2025-59501

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network...

CVE-2025-59501

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network...

CVE-2025-59501 Microsoft Configuration Manager Spoofing Vulnerability

...

CVE-2025-59501 Microsoft Configuration Manager Spoofing Vulnerability

...

CVE-2025-59501

CVE-2025-59501 is a confirmed spoofing/authentication-bypass vulnerability in Microsoft Configuration Manager (aka Configuration Manager/Endpoint Configuration Manager). Descriptions across Red Hat, NVD, and Microsoft-related sources indicate an attacker with adjacent access could spoof identity ...

Microsoft Configuration Manager Spoofing Vulnerability

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network...

PT-2025-44654

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager affected versions not specified Description An authentication bypass through spoofing exists in Microsoft Configuration Manager. This allows an authorized attacker to perform spoofing attacks over an adjacent...

KLA89722 Multiple vulnerability in Microsoft System Center

Multiple vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2025-59501 Related products Microsoft-Configuration-Manager CVE list CVE-2025-59501 warning Solution Install necessary updates from the KB...