299 matches found
CVE-2020-5839
CVE-2020-5839 CVE-2020-5839 POC Symantec EDR local on-prem anterior a la versión "4.4.0" es propenso a una vulnerabilidad de divulgación de información a través de las siguientes URL: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds...
CVE-2020-12593
CVE-2020-12593 CVE-2020-12593 概念验证 Symantec EDR 本地部署版本（低于"4.5"）存在信息泄露漏洞，可通过以下URL利用： https://@IPEDR/atpapi/v2/policies/blacklist 参考 https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-Response-Security-Update/SYMSA16562...
drs-malware-scan
Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...
conduit
Conduit 面向AI编码代理的本地控制平面。 按工程师计费 · 硬预算 · 出站治理 · 上下文膨胀可观测性 · 审计就绪导出 —— 全部位于您的VPC内。 Conduit 位于您的 AI 编码代理（Claude Code、Cursor、Codex、Aider）与您已使用的任何提供商（Anthropic、OpenAI、Bedrock、Azure —— 或您现有的 LiteLLM / Portkey 部署）之间。只需一个环境变量即可接入，客户端无需更改，提示和补全内容永不存储。 Claude Code / Cursor / Codex │...
CVE-2025-8352
Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption CPU and RAM, leading to conditions for a Denial-of-Service attack...
CVE-2025-8352
A Denial-of-Service (DoS) vulnerability exists in ESET PROTECT On-Prem due to the allocation of resources without limits or throttling . This flaw allows for increased resource consumption of CPU and RAM , which can lead to a DoS condition. No specific exploit information or manual remediation st...
EUVD-2025-211031
Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption CPU and RAM, leading to conditions for a Denial-of-Service attack...
CVE-2025-8352 Denial-of-service vulnerability in ESET PROTECT On-Prem
Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption CPU and RAM, leading to conditions for a Denial-of-Service attack...
CVE-2025-53770
CVE-2025-53770 这是一个针对 SharePoint 未认证远程代码执行漏洞 的扫描器，漏洞编号为 CVE-2025-53770。 该代码是通过逆向分析一个在野外见到的 payload 编写的。 使用风险自负，我对可能造成的任何负面影响概不负责。 它是如何工作的？ 它尝试通过向 SharePoint ToolBox 控件中注入一个标记来利用该漏洞。 如果在 SharePoint 服务器的响应中找到这个无害的标记，则该主机被标记为易受攻击。 如何使用 检查 是否易受攻击，并尝试提取版本信息 % ./CVE-2025-53770 ... INFO0000 set log leve...
CVE-2025-53770
CVE-2025-53770 这是一个针对SharePoint未认证远程代码执行漏洞的扫描器，其CVE编号为CVE-2025-53770。 该代码是通过对野外中发现的payload进行反向工程编写的。 请自行承担使用风险，对于可能造成的任何负面影响，本人概不负责。 工作原理 它试图通过向SharePoint ToolBox小部件注入一个标记来利用该漏洞。 如果在SharePoint服务器响应中发现这个无害标记，则将该主机标记为易受攻击。 使用方法 check if is vulnerable and try extract version information %...
cve-2021-26084-confluence
这是一个快速粗糙的PoC，针对特定的Confluence实例进行了调整，因为现有的现成PoC没有一个能正常工作。 显然，它几乎完全基于 https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md 和 https://github.com/alt3kx/CVE-2021-26084PoC 的工作。 你需要在脚本中设置一些变量。 host 是你要检查的主机。 sessionid 是从登录Confluence时创建的JSESSIONID cookie中获取的会话ID。 spacekey 是你系统上的任意有效空间键 -...
Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...
cve-2021-27065
我将继续添加任何新代码或修改现有代码，基于搜索被盗数据 如果你的系统已被入侵，这些脚本无论如何都无法修复它！ 除了让你知晓系统遭受到的程度之外，这些脚本对你没有任何好处。 话虽如此，我将继续在这里添加我们在研究系统可能被盗取的哪些数据时所使用的脚本。 有用链接 1. https://www.bleepingcomputer.com/news/security/microsofts-msert-tool-now-finds-web-shells-from-exchange-server-attacks/ 2...
CVE-2019-19547
CVE-2019-19547 CVE-2019-19547 POC Symantec EDR on-prem en versiones anteriores a la "4.3.0" es vulnerable a un XSS reflejado no autenticado a través de la siguiente URL: https://@IPEDR/r3epmpi/v1/dx/log Referencia...
CVE-2026-93952
VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...
CVE-2026-93952 Security Advisory 0183
VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...
CVE-2026-93952 Security Advisory 0183
VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...
Security Advisory 0183
Security Advisory 0183 . CSAF PDF Date: September 22, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 22, 2026 | Initial release 1.1 | September 23, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-93952 CVSSv3.1 Base Score: 10.0...
CVE-2026-81939
A Zip Slip vulnerability in the SonicWall Network Security Manager NSM On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive...