PXEThief

PXEThief PXEThief is a set of tooling that implements attack paths discussed at the DEF CON 30 talk Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 against the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager or ConfigMgr,...

Windows Deployment Services DoS

The vulnerability of Windows operating system deployment services is related to improper resource cleaning. Exploiting this vulnerability can allow a remote attacker to cause service failures...

HCL Technologies BigFix OSD Injection Vulnerability

HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. for operating system deployment. A security vulnerability exists in HCL Technologies BigFix OSD Bare Metal Server version 311.12 and prior versions, which stems from the inclusion of a host header...

HCL Technologies BigFix OSD encryption vulnerability

HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. for operating system deployment. A security vulnerability exists in the HCL Technologies BigFix OSD that stems from the server using an insecure encryption algorithm...

Dell KACE K2000 Web Detection

The web interface for a Dell KACE K2000 appliance was detected on the remote host. The K2000 is used to deploy operating system installations via the network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53492; scriptversion"1.8"; scriptcvsdate"Date: 2020/01/22";...