CVE-2021-34473-scanner

CVE-2021-34473-scanner CVE-2021-34473, ProxyShell, Microsoft Exchange ऑन-प्रिमाइज़ भेद्यता के लिए स्कैनर एक-एक करके मशीनों का परीक्षण करने के लिए, scanner-CVE-2021-34473.bat का उपयोग करें: scanner-CVE-2021-34473.bat mail.exemple.fr एक साथ कई मशीनों का परीक्षण करने के लिए, mass-scanner का उपयोग कर...

vaultize_CVE-2024-36079

भेद्यता के बारे में ऑन-प्रिमाइसेस Vaultize DRM v.21.07.27 मनमानी फ़ाइलों को अपलोड करने के लिए संवेदनशील है। फ़ाइल नामों में फ़ाइल सिस्टम के पूर्ण पथ का हिस्सा होने वाली फ़ाइलों को फ़ाइलनाम फ़िल्टरिंग के अभाव के कारण अपलोड किया जा सकता है। जब आप फ़ाइलों को डाउनलोड करने का प्रयास करते हैं तो...

itsm-exploit

استغلالات لـ Ivanti Neurons for ITSM محلي يستغل هذا السكريبت عدة ثغرات تسمح لمهاجم غير مصادَق بالحصول على وصول كمسؤول وتنفيذ أوامر عن بُعد CVE-2023-46808 على Ivanti Neurons for ITSM محلي. للاطلاع على التفاصيل التقنية، راجع التفاصيل التقنية الإصدارات المتأثرة الإصدارات من 2021.1.0.2021060601 إلى...

FACT

फोरेंसिक कलाकृति संग्रह उपकरण अवलोकन FACT एक उपकरण है जो क्लाउड या ऑन-प्रिमाइसेस पर चलने वाली मशीनों के क्लस्टर से फोरेंसिक डेटा एकत्र करने, प्रक्रिया करने और विज़ुअलाइज़ करने के लिए है। परिनियोजन एक बुनियादी एकल-नोड परिनियोजन के लिए, हम Docker और Docker Compose का उपयोग करने की अनुशंसा करते हैं।...

CVE-2026-15933

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext, allowing an authenticated administrator to view previously configured passwords—SMTP , FTP (scan delivery), Active Directory (user list import), and SharePoint —in cleartext through the web administration panel p...

ExchangeRelayX

ExchangeRelayX Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to perform an SMB or HTTP based NTLM relay attack to the EWS endpoint on an on-premise Microsoft Exchange server to compromise the mailbox of the victim. This tool provides the attacker with an OWA looking...

CVE-2023-3897

CVE-2023-3897 Windows 배포에서 On-premise SureMDM 솔루션의 CAPTCHA 우회를 통해 사용자 이름 열거가 가능하며, 이를 통해 공격자가 오류 메시지를 통해 로컬 사용자 정보를 열거할 수 있습니다. 이 문제는 SureMDM On-premise 6.31 및 이하 버전에 영향을 미칩니다. https://nvd.nist.gov/vuln/detail/CVE-2023-3897...

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

TeamPass

Teampass Self-hosted password management your whole team can trust Folder-level access control · authenticated AES-256-GCM encryption · compliance evidence Your secrets never leave your infrastructure. 🌐teampass.net · 📖Documentation · 💬Discussions · 🐳Docker Hub !Docker...

vulnerabilities in Adobe Campaign Classic

Adobe has identified vulnerabilities in Adobe Campaign Classic ACC. The first vulnerability relates to incorrect authorization in ACC’s core authorization mechanisms, allowing attackers to execute arbitrary code without any user interaction. This means that attackers can perform actions beyond th...

EUVD-2026-51200

IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-12118

CVE-2026-12118 affects IBM webMethods Integration (on-prem) versions 10.15 and 10.11 due to deserialization of untrusted data in the bundled WmServiceMock package, allowing an unauthenticated remote attacker to execute arbitrary code. There is no product patch; remediation is to remove the WmServ...

EUVD-2026-49334

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-47007

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications component: On-premise Deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logo...

PT-2026-62172

Name of the Vulnerable Software and Affected Versions Oracle Communications Pricing Design Center versions 15.0.0.0.0 through 15.2.0.0.0 Description A flaw in the On-premise Deployment component allows a low-privileged attacker with access to the infrastructure where the software executes to...

Vulnerabilities in Microsoft Exchange

Microsoft has addressed vulnerabilities in Exchange, both Online and on-premise versions. A malicious individual could exploit these vulnerabilities to impersonate other users, gain elevated privileges, execute arbitrary code, and thereby access sensitive data. The vulnerability in Exchange Onlin...

PYSEC-2026-1217 BBOT's gitlab.py exposes globally configured "gitlab" API key

Summary bbot's gitlab.py sends the user's "gitlab" API key to on-premise GitLab instances. If a user has configured a gitlab.com API key using this mechanism, it may be leaked to an attacker-controlled server. Impact A user with a "gitlab" API key configured who uses bbot to scan a malicious...

CVE-2026-44744

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

EUVD-2026-35281

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

CVE-2026-44744

Affected software : SAP S/4HANA On-Premise. Vulnerability : SQL injection in a remote-enabled function module component. Root cause / what’s vulnerable : An authenticated attacker could influence SQL queries via the affected function module, potentially enabling unauthorized database queries. Imp...