drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

conduit

Conduit 面向AI编码代理的本地控制平面。 按工程师计费 · 硬预算 · 出站治理 · 上下文膨胀可观测性 · 审计就绪导出 —— 全部位于您的VPC内。 Conduit 位于您的 AI 编码代理（Claude Code、Cursor、Codex、Aider）与您已使用的任何提供商（Anthropic、OpenAI、Bedrock、Azure —— 或您现有的 LiteLLM / Portkey 部署）之间。只需一个环境变量即可接入，客户端无需更改，提示和补全内容永不存储。 Claude Code / Cursor / Codex │...

cve-2021-27065

我将继续添加任何新代码或修改现有代码，基于搜索被盗数据 如果你的系统已被入侵，这些脚本无论如何都无法修复它！ 除了让你知晓系统遭受到的程度之外，这些脚本对你没有任何好处。 话虽如此，我将继续在这里添加我们在研究系统可能被盗取的哪些数据时所使用的脚本。 有用链接 1. https://www.bleepingcomputer.com/news/security/microsofts-msert-tool-now-finds-web-shells-from-exchange-server-attacks/ 2...

CVE-2019-19547

CVE-2019-19547 CVE-2019-19547 POC Symantec EDR 本地部署版（版本低于 "4.3.0"）存在无需认证的反射型 XSS 漏洞，可通过以下 URL 触发： https://@IPEDR/r3epmpi/v1/dx/log 参考 https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-and-Response-XSS/SYMSA1502...

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC 早于 "4.4.0" 版本的 Symantec EDR 本地部署版存在信息泄露漏洞，可通过以下 URL 访问： https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds https://@IPEDR/atpapp/features/list 参考...

CVE-2020-12593

CVE-2020-12593 CVE-2020-12593 POC Symantec EDR on-prem en versiones anteriores a "4.5" es propenso a una vulnerabilidad de divulgación de información a través de la siguiente URL: https://@IPEDR/atpapi/v2/policies/blacklist Referencia...

CVE-2025-53770

CVE-2025-53770 Este es un escáner para la vulnerabilidad de ejecución remota de código no autenticada de SharePoint, asignada con el número de CVE CVE-2025-53770. El código fue escrito mediante ingeniería inversa de un payload visto en la naturaleza. Úselo bajo su propio riesgo, no soy responsabl...

CVE-2025-53770

CVE-2025-53770 这是一个针对SharePoint未认证远程代码执行漏洞的扫描器，其CVE编号为CVE-2025-53770。 该代码是通过对野外中发现的payload进行反向工程编写的。 请自行承担使用风险，对于可能造成的任何负面影响，本人概不负责。 工作原理 它试图通过向SharePoint ToolBox小部件注入一个标记来利用该漏洞。 如果在SharePoint服务器响应中发现这个无害标记，则将该主机标记为易受攻击。 使用方法 check if is vulnerable and try extract version information %...

cve-2021-26084-confluence

这是一个快速粗糙的PoC，针对特定的Confluence实例进行了调整，因为现有的现成PoC没有一个能正常工作。 显然，它几乎完全基于 https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md 和 https://github.com/alt3kx/CVE-2021-26084PoC 的工作。 你需要在脚本中设置一些变量。 host 是你要检查的主机。 sessionid 是从登录Confluence时创建的JSESSIONID cookie中获取的会话ID。 spacekey 是你系统上的任意有效空间键 -...

Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...

CVE-2026-93952

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-93952 Security Advisory 0183

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-93952 Security Advisory 0183

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

Security Advisory 0183

Security Advisory 0183 . CSAF PDF Date: September 22, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 22, 2026 | Initial release 1.1 | September 23, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-93952 CVSSv3.1 Base Score: 10.0...

CVE-2026-81939

A Zip Slip vulnerability in the SonicWall Network Security Manager NSM On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive...

CVE-2026-78328

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...

CVE-2026-81939

A Zip Slip vulnerability in the SonicWall Network Security Manager NSM On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive...

CVE-2026-81939

A Zip Slip vulnerability exists in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality. The root cause is an improper limitation of a pathname to a restricted directory (CWE-22), which allows an attacker to extract files outside the intended desti...

CVE-2026-78328

A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate their privileges to SuperAdmin . This flaw is associated with CWE-862 . Impact includes high confidentiality, integrity, and availabi...

CVE-2026-78328

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...