1136 matches found
Structurizr on-premises - Cross Site Scripting
Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194. id: CVE-2023-5556 info: name: Structurizr on-premises - Cross Site Scripting author: shankaracharya severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository...
sharepoint-toolshell-cve-2025-53770
SharePoint "ToolShell" RCE Exploit CVE-2025-53770 Overview CVE-2025-53770 is a critical remote code execution RCE vulnerability affecting Microsoft SharePoint Server 2016, 2019, and Subscription Edition on-premises only, not SharePoint Online. Attackers can bypass authentication and achieve full...
drs-malware-scan
Análisis de escaneo de malware en servidores on-premises utilizando servicios de AWS Desafíos de la detección de malware en entornos on-premises Para los equipos de seguridad, puede ser difícil monitorear continuamente todos los servidores on-premises debido a restricciones presupuestarias y de...
CVE-2025-53770
CVE-2025-53770 SharePoint Descripción La deserialización de datos no confiables en Microsoft SharePoint Server local permite que un atacante ejecute código de forma remota y comprometa el sistema. Microsoft está al tanto de la explotación activa y está preparando una actualización integral...
Exploit-CVE-2023-22518
Exploit-CVE-2023-22518 CVE-2023-22518 Confluence में CVE-2023-22518 : इस भेद्यता को "Confluence के डेटाबेस और सर्वर में अनुचित प्राधिकरण भेद्यता" के रूप में वर्णित किया गया है। यह बग Atlassian उत्पादों के On-premises संस्करणों को प्रभावित करता है। पर्यावरण सेटअप भेद्य संस्करण 8.0.4 का उपयोग करें...
sharepoint-toolshell-micro-postmortem
Micro-Postmortem de Incidente — Campaña “ToolShell” de Microsoft SharePoint On-Prem Este kit realiza el triaje de la campaña de día cero “ToolShell” de mediados de 2025 contra Microsoft SharePoint Server local on-premises ; SharePoint Online queda fuera de alcance. Proporciona búsquedas hunts,...
CVE-2026-63077
Overview • Visual Flow • Requirements • Usage • Limitations • Mitigation !CAUTION This PoC executes an operating-system command and can modify the TeamCity application directory. Use it only in an isolated lab or against systems for which you have explicit written authorization. ⚡ Overview...
Azure-AD-Incident-Response-PowerShell-Module
Azure AD Incident Response PowerShell Module The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team DART, to assist in compromise response. Why u...
EIPP
EIPP Banned Password Lists Tools for manipulating Banned Password Lists BPL of Entra ID Password Protection. The eipp-global-bpl.txt containing the entries of the global banned password list was dumped on 2024-04-11. More info at...
cve-2024-56348
JetBrains TeamCity Authentication Bypass + RCE CVE-2024-56348 PoC 📜 Description CVE-2024-56348 is a critical authentication bypass vulnerability in JetBrains TeamCity on-premises affecting all versions prior to 2024.12. The REST API improperly handles requests to paths containing ;.jsp, allowing ...
CVE-2026-19117
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...
EUVD-2026-70252
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...
CVE-2026-19117
CVE-2026-19117 affects Delinea Secret Server in on-premises deployments . Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and subsequently authenticate as that user, effectively bypassing authentication. The vulnerability is rat...
CVE-2026-19117 Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...
analyze-Exploit-CVE-2023-22518-Confluence
Exploit-CVE-2023-22518 CVE-2023-22518 in Confluence CVE-2023-22518 : This vulnerability is described as an "improper authorization vulnerability in Confluence's database and server". The flaw affects On-premises versions of Atlassian products. SETUP Set up the environment. Use the vulnerable...
PT-2026-84847
Name of the Vulnerable Software and Affected Versions Delinea Secret Server On-Prem versions 10.6.0 through 11.7.61 Delinea Secret Server On-Prem versions 11.8.0 through 11.8.1 Delinea Secret Server On-Prem versions 11.9.0 through 11.9.47 Delinea Secret Server On-Prem versions 12.0.0 through...
CVE-2025-53770
CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...
EUVD-2026-62926
In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../checkconnectivity endpoint to make Splunk SOAR initiate outbound network connections to arbitrary destinations and determine whether internal hosts and ports are reachable. The...
