sccmhound

SCCMHound SCCMHound 是一个用于 Microsoft Configuration Manager MCM 的 C BloodHound 收集器。如果您正在寻找一种从 Configuration Manager 的用户和计算机中收集 BloodHound 会话信息的方法，那么这个工具正是您所需要的！ 强烈建议将收集到的数据与其他收集器的数据（SharpHound、SOAPHound 等）一起导入。无论是在其他数据集之前还是之后导入都没有关系。这样可以获得目标组织 Active Directory 关系的全面概览，并辅以从 Configuration Manager...

CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503 未认证 SQL 注入 CVE-2025-59213 漏洞利用 此脚本利用 CVE-2025-59213 漏洞，该漏洞允许具有网络访问权限的未认证攻击者通过滥用 Discovery Data Manager DDM 的 DuplicateAMTMachineRecord 方法中的 SQL 注入缺陷，在站点数据库上执行任意 SQL 查询。在合并两个硬件 ID 冲突的客户端时，未转义的 HardwareID0 字段被不当处理。 当缺少 KB34503790 时，以下所有 Microsof...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-远程代码执行漏洞利用 我发现的被分配为 CVE-2026-47301 的概念验证漏洞利用链，针对 Microsoft Configuration Manager SCCM，结合了访问控制缺陷、CAB 解压路径遍历任意文件写入、证书验证绕过以及 DLL 劫持，以实现 SYSTEM 级别的代码执行。 如何使用？ 此漏洞利用使用专门为滥用此 CVE 而构造的恶意 cab 文件，我为此 POC 提供了一个 cab 文件。 该漏洞利用将通过将两个 DLL 植入到从预期路径到 Configuration Manager \bin\X64 安装目录的...

CVE-2026-47301

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

PT-2026-58695

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager version 2509 Description Improper access control allows an authorized attacker to elevate privileges over a network. This issue can be part of an exploit chain involving broken access, CAB arbitrary-write path...

Microsoft Configuration Manager SQL Injection Vulnerability

Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server...

CVE-2025-47179

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-47179

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally...

EUVD-2025-93420

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally...

PT-2025-46451

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager affected versions not specified Description An improper access control issue exists in Microsoft Configuration Manager. This allows an authorized attacker to elevate privileges locally. Recommendations At the...

Microsoft Configuration Manager 访问控制错误漏洞

Microsoft Configuration Manager is a Microsoft solution for managing computers and servers within an organization that helps IT departments keep software up-to-date, set configuration and security policies, and monitor system status. An elevation of privilege vulnerability exists in Microsoft...

CVE-2025-59501

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network...

CVE-2025-59501

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network...

CVE-2025-59501

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network...

CVE-2025-59501 Microsoft Configuration Manager Spoofing Vulnerability

...

CVE-2025-59501 Microsoft Configuration Manager Spoofing Vulnerability

...

CVE-2025-59501

CVE-2025-59501 is a confirmed spoofing/authentication-bypass vulnerability in Microsoft Configuration Manager (aka Configuration Manager/Endpoint Configuration Manager). Descriptions across Red Hat, NVD, and Microsoft-related sources indicate an attacker with adjacent access could spoof identity ...

Microsoft Configuration Manager Spoofing Vulnerability

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network...

PT-2025-44654

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager affected versions not specified Description An authentication bypass through spoofing exists in Microsoft Configuration Manager. This allows an authorized attacker to perform spoofing attacks over an adjacent...

Microsoft Configuration Manager 安全漏洞

Microsoft Configuration Manager is a Microsoft solution for managing computers and servers within an organization that helps IT departments keep software up-to-date, set configuration and security policies, and monitor system status. A security vulnerability exists in Microsoft Configuration...