CVE-2025-21293

CVE-2025-21293 CVE-2025-21293는 Active Directory 도메인 서비스의 권한 상승 취약점입니다. 이 취약점은 "네트워크 구성 운영자"가 Windows 성능 카운터를 통해 SYSTEM 권한으로 코드를 실행할 수 있게 합니다. 영향을 받는 Windows 버전에는 Windows 10, 11 및 Server가 포함됩니다. Microsoft는 2025년 1월에 이를 패치했습니다. 위험을 완화하려면 업데이트를 적용하십시오...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

CVE-2018-17240_exploit

CVE-2018-17240exploit CVE-2018-17240 Netwave 카메라 메모리 누수에 대한 Bash 익스플로잇 취약한 Netwave 카메라에서 이 익스플로잇을 실행하여 카메라의 네트워크 구성과 자격 증명을 덤프합니다. "Possible Username" 및 "Possible Password" 자격 증명을 사용하여 웹 인터페이스에 로그인할 수 있습니다. Usage : bash exploit.sh host port...

CVE-2026-12370

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

CVE-2026-15358

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

EUVD-2026-85237

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-15358 Path Traversal Vulnerability

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-15358 Path Traversal Vulnerability

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-15358

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions prior to 12.8.671 are susceptible to an unauthorized Path Traversal vulnerability. This flaw allows for unauthorized access to restricted file system paths. Specific exploitation details and links are not provided in the d...

CVE-2026-12370 Remote Code Execution Vulnerability

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

CVE-2026-12370

ZohoCorp ManageEngine OpManager , NetFlow Analyzer , and Network Configuration Manager (versions 12.8.667 and below) are vulnerable to a Server-Side Template Injection vulnerability. This flaw exists during Configlet processing and could lead to Remote Code Execution . While the impact is signifi...

CVE-2026-12370 Remote Code Execution Vulnerability

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

EUVD-2026-85228

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

PT-2026-97280

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions prior to 12.8.668 ManageEngine NetFlow Analyzer versions prior to 12.8.668 ManageEngine Network Configuration Manager versions prior to 12.8.668 Description Server-Side Template Injection SSTI occurs during...

PT-2026-97686

Attackers chained CVE-2024-67279 and CVE-2024-86060 to compromise MikroTik routers without authentication, creating privileged accounts and exfiltrating network configurations. Router compromise enables pivoting to internal segments that bypass perimeter defenses. ZeroTrust 🔗 Full TRC analysis:...

CVE-2026-12370: Improper Neutralization of Special Elements Used in a Template Engine

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

CVE-2026-15358: Unquoted Search Path or Element

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

PT-2026-97289

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions prior to 12.8.671 ManageEngine Network Configuration Manager versions prior to 12.8.671 Description An unauthorized Path Traversal issue exists, which allows an attacker to access files and directories outside t...

CVE-2026-73437: Insufficient Verification of Data Authenticity

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper address, and the relay agent would forward it to...

PT-2026-93190

Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wan config set cgi, wan num set cgi, and lan ip change cgi endpoints. Attackers can craft forged requests to trick authenticated administrators into modifying WAN or LAN network...