FACT

Инструмент сбора криминалистических артефактов Обзор FACT — это инструмент для сбора, обработки и визуализации криминалистических данных из кластеров машин, работающих в облаке или локально. Развёртывание Для простого одноузлового развёртывания мы рекомендуем использовать Docker и Docker Compose...

ExchangeRelayX

ExchangeRelayX Версия 1.0.0. Этот инструмент является PoC для демонстрации возможности атакующего выполнить NTLM relay-атаку на основе SMB или HTTP на конечную точку EWS локального сервера Microsoft Exchange с целью компрометации почтового ящика жертвы. Инструмент предоставляет атакующему...

itsm-exploit

Ivanti Neurons for ITSM온프레미스용 익스플로잇 이 스크립트는 인증되지 않은 공격자가 Ivanti Neurons for ITSM온프레미스에서 관리자 액세스 권한을 얻고 원격 명령을 실행할 수 있게 하는 여러 결함CVE-2023-46808을 악용합니다. 기술적 세부 사항은 기술 세부 사항을 참조하세요. 영향을 받는 버전 2021.1.0.2021060601 부터 2020.4.0.2021033001 까지의 버전이 영향을 받으며, 이전 버전도 취약할 가능성이 높습니다. 사용법 요구 사항 설치: root@kitploit...

CVE-2021-34473-scanner

CVE-2021-34473-scanner Сканер для CVE-2021-34473, ProxyShell, уязвимости Microsoft Exchange On-premise Для проверки машин по одной используйте scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr Для одновременной проверки нескольких машин используйте mass-scanner и добавьте...

vaultize_CVE-2024-36079

О уязвимости Локальная версия Vaultize DRM v.21.07.27 уязвима для загрузки произвольных файлов. Файлы, имена которых содержат часть абсолютного пути файловой системы, могут быть загружены из-за отсутствия фильтрации имени файла. Когда вы пытаетесь скачать файлы , приложение создает временный файл...

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

CVE-2023-3897

CVE-2023-3897 ユーザー名の列挙が可能です。On-premise SureMDM Solution on Windows deploymentにおいて、CAPTCHAをバイパスすることで、攻撃者はエラーメッセージを介してローカルユーザー情報を列挙できます。 この問題はSureMDM On-premise 6.31およびそれ以下のバージョンに影響します。 https://nvd.nist.gov/vuln/detail/CVE-2023-3897...

TeamPass

Teampass Самостоятельно размещаемый менеджер паролей, которому доверяет вся ваша команда Контроль доступа на уровне папок · аутентифицированное шифрование AES-256-GCM · доказательства соответствия требованиям Ваши секреты никогда не покидают вашу инфраструктуру. 🌐teampass.net · 📖Документация ·...

Vulnerabilities in Microsoft Dynamics

Microsoft has patched 2 vulnerabilities in Dynamics, both for online and on-premise environments. These vulnerabilities allow malicious actors to gain elevated privileges, execute arbitrary code, and/or access sensitive data. Microsoft Dynamics 365: | CVE-ID | CVSS | Impact |...

CVE-2026-84385

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7....

CVE-2026-84385

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7....

CVE-2026-84385

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7....

CVE-2026-84385

Fortinet FortiSOAR (both PaaS and on-premise ) is affected by an improper access control vulnerability spanning versions 7.3 through 7.6.6 (all 7.3 and 7.4 versions; 7.5.0–7.5.3; 7.6.0–7.6.6). The flaw may allow an attacker with low privileges to achieve privilege escalation over the network with...

PT-2026-87177

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7....

CVE-2026-15933

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext, allowing an authenticated administrator to view previously configured passwords—SMTP , FTP (scan delivery), Active Directory (user list import), and SharePoint —in cleartext through the web administration panel p...

vulnerabilities in Adobe Campaign Classic

Adobe has identified vulnerabilities in Adobe Campaign Classic ACC. The first vulnerability relates to incorrect authorization in ACC’s core authorization mechanisms, allowing attackers to execute arbitrary code without any user interaction. This means that attackers can perform actions beyond th...

EUVD-2026-51200

IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-12118

CVE-2026-12118 affects IBM webMethods Integration (on-prem) versions 10.15 and 10.11 due to deserialization of untrusted data in the bundled WmServiceMock package, allowing an unauthenticated remote attacker to execute arbitrary code. There is no product patch; remediation is to remove the WmServ...

EUVD-2026-49334

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-47007

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications component: On-premise Deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logo...