TeamPass

TeamPass 3 TeamPass ist eine kollaborative Passwortverwaltungslösung, die vor Ort installiert wird. Copyright © 2009-2026, Nils Laumaillé Anforderungen Über PHP-Versionen Installation Traditionelle Installation Empfohlen Docker Dokumentation Sprachen Lizenzvereinbarung Webseite Fehler Anforderung...

FACT

Ferramenta de Coleta de Artefatos Forenses Visão Geral FACT é uma ferramenta para coletar, processar e visualizar dados forenses de clusters de máquinas executando na nuvem ou on-premise. Implantação Para uma implantação básica de um único nó, recomendamos usar Docker e Docker Compose. Primeiro,...

CVE-2023-3897

CVE-2023-3897 L'enumerazione degli username è possibile bypassando il CAPTCHA nella soluzione SureMDM On-premise su Windows, permettendo a un attaccante di enumerare le informazioni degli utenti locali tramite messaggio di errore. Questo problema riguarda SureMDM On-premise: versione 6.31 e...

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

vaultize_CVE-2024-36079

Sobre a Vulnerabilidade O Vaultize DRM on-premise v.21.07.27 é vulnerável ao upload de arquivos arbitrários. Arquivos cujos nomes contenham parte do caminho absoluto do sistema de arquivos podem ser enviados devido à falta de filtragem de nomes de arquivo. Quando você tenta baixar os arquivos o...

ExchangeRelayX

ExchangeRelayX Versione 1.0.0. Questo strumento è un PoC per dimostrare la capacità di un attaccante di effettuare un attacco di relay NTLM basato su SMB o HTTP verso l'endpoint EWS su un server Microsoft Exchange on-premise per compromettere la cassetta postale della vittima. Questo strumento...

CVE-2021-34473-scanner

CVE-2021-34473-scanner ماسح ضوئي لـ CVE-2021-34473، ثغرة ProxyShell، وهي ثغرة في Microsoft Exchange المحلي لاختبار الآلات واحدة تلو الأخرى، استخدم scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr لاختبار آلات متعددة دفعة واحدة، استخدم mass-scanner وأضف عنوان IP / FQDN المراد...

itsm-exploit

Exploits für Ivanti Neurons for ITSM On Premise Dieses Skript nutzt mehrere Schwachstellen aus, die es einem nicht authentifizierten Angreifer ermöglichen, Administratorzugriff zu erlangen und entfernte Befehle auf Ivanti Neurons for ITSM On Premise auszuführen CVE-2023-46808. Technische Details...

vulnerabilities in Adobe Campaign Classic

Adobe has identified vulnerabilities in Adobe Campaign Classic ACC. The first vulnerability relates to incorrect authorization in ACC’s core authorization mechanisms, allowing attackers to execute arbitrary code without any user interaction. This means that attackers can perform actions beyond th...

EUVD-2026-51200

IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-12118

CVE-2026-12118 affects IBM webMethods Integration (on-prem) versions 10.15 and 10.11 due to deserialization of untrusted data in the bundled WmServiceMock package, allowing an unauthenticated remote attacker to execute arbitrary code. There is no product patch; remediation is to remove the WmServ...

EUVD-2026-49334

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-47007

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications component: On-premise Deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logo...

PT-2026-62172

Name of the Vulnerable Software and Affected Versions Oracle Communications Pricing Design Center versions 15.0.0.0.0 through 15.2.0.0.0 Description A flaw in the On-premise Deployment component allows a low-privileged attacker with access to the infrastructure where the software executes to...

Vulnerabilities in Microsoft Exchange

Microsoft has addressed vulnerabilities in Exchange, both Online and on-premise versions. A malicious individual could exploit these vulnerabilities to impersonate other users, gain elevated privileges, execute arbitrary code, and thereby access sensitive data. The vulnerability in Exchange Onlin...

PYSEC-2026-1217 BBOT's gitlab.py exposes globally configured "gitlab" API key

Summary bbot's gitlab.py sends the user's "gitlab" API key to on-premise GitLab instances. If a user has configured a gitlab.com API key using this mechanism, it may be leaked to an attacker-controlled server. Impact A user with a "gitlab" API key configured who uses bbot to scan a malicious...

CVE-2026-44744

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

CVE-2026-44744 SQL Injection vulnerability in SAP S/4HANA

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

EUVD-2026-35281

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

CVE-2026-44744

Affected software : SAP S/4HANA On-Premise. Vulnerability : SQL injection in a remote-enabled function module component. Root cause / what’s vulnerable : An authenticated attacker could influence SQL queries via the affected function module, potentially enabling unauthorized database queries. Imp...