ProxyNotShell-PoC

Working PoC for CVE-2022-41040 and CVE-2022-41082 A.K.A ProxyNotShell Requirement: pip install requestsntlm2 requests Usage: python pocaug3.py Creds: ProxyShell PoC script from: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc's blog post...

CVE-2026-4823

A flaw has been found in Enter Software Iperius Backup up to 8.7.3. Affected by this vulnerability is an unknown functionality of the component NTLM2 Handler. Executing a manipulation can lead to information disclosure. The attack is restricted to local execution. Attacks of this nature are highl...

CVE-2026-4823

A flaw has been found in Enter Software Iperius Backup up to 8.7.3. Affected by this vulnerability is an unknown functionality of the component NTLM2 Handler. Executing a manipulation can lead to information disclosure. The attack is restricted to local execution. Attacks of this nature are highl...

CVE-2026-4823

CVE-2026-4823 concerns Enter Software Iperius Backup (≤ 8.7.3). The issue affects an unspecified function in the NTLM2 Handler component, enabling an information disclosure under local execution. The attack surface is limited to local access, with high attack complexity and a low overall risk sco...

PT-2026-28133

Name of the Vulnerable Software and Affected Versions Enter Software Iperius Backup versions up to 8.7.3 Description A flaw exists in Enter Software Iperius Backup related to the NTLM2 Handler component, potentially leading to information disclosure. Exploitation is limited to local execution and...

CVE-2026-4823: Exposure of Sensitive Information to an Unauthorized Actor

A flaw has been found in Enter Software Iperius Backup up to 8.7.3. Affected by this vulnerability is an unknown functionality of the component NTLM2 Handler. Executing a manipulation can lead to information disclosure. The attack is restricted to local execution. Attacks of this nature are highl...

Прорыв сквозь фашистский фаервол: Туннелинг-инкапсуляция в корпоративных средах с ISA

Предисловие. Данная статья не несет каких-либо новых концепций, но является оригинальной. Ввиду этого прошу не разводить флуд, что это уже все было у бабушки во сне, етс. Так же не статья не является руководством по использованию перечисленного программного обеспечения, а рассматривает частную...