FACT

포렌식 아티팩트 수집 도구 개요 FACT는 클라우드 또는 온프레미스에서 실행되는 머신 클러스터로부터 포렌식 데이터를 수집, 처리 및 시각화하는 도구입니다. 배포 기본 단일 노드 배포의 경우 Docker 및 Docker Compose 사용을 권장합니다. 먼저 구성 및 요구사항을 위해 docker-compose.yaml을 읽어보세요. 그런 다음 다음 명령어로 스택을 시작합니다. root@kitploit: docker-compose up -d 자세한 내용 및 다른 배포 방법에 대해서는 설치 가이드를 참조하세요. FACT 사용하기 사...

ExchangeRelayX

ExchangeRelayX 버전 1.0.0. 이 도구는 공격자가 SMB 또는 HTTP 기반 NTLM 릴레이 공격을 수행하여 온프레미스 Microsoft Exchange 서버의 EWS 엔드포인트를 대상으로 피해자의 사서함을 손상시킬 수 있는 능력을 입증하는 PoC입니다. 이 도구는 공격자에게 OWA와 유사한 인터페이스를 제공하며, 사용자의 사서함과 연락처에 접근할 수 있습니다. 배경 Defcon26에서 공개되었습니다. 도구의 배경, 악용되는 핵심 문제, 그리고 녹화된 데모는 여기에서 확인하세요:...

itsm-exploit

Ivanti Neurons for ITSM（オンプレミス）向けエクスプロイト このスクリプトは、認証されていない攻撃者が管理者アクセスを取得し、 Ivanti Neurons for ITSM（オンプレミス） 上でリモートコマンドを実行できるようにする複数の欠陥を悪用します（CVE-2023-46808）。 技術的な詳細については、技術詳細 を参照してください。 影響を受けるバージョン バージョン 2021.1.0.2021060601 から 2020.4.0.2021033001 が影響を受け、それ以前のバージョンも脆弱である可能性があります。 使用方法 依存パッケージをインストー...

vaultize_CVE-2024-36079

Acerca de la vulnerabilidad La versión on-premise de Vaultize DRM v.21.07.27 es vulnerable a la subida de archivos arbitrarios. Los archivos cuyos nombres contienen parte de la ruta absoluta del sistema de archivos pueden subirse debido a la falta de filtrado de nombres de archivo. Al intentar...

CVE-2023-3897

CVE-2023-3897 La enumeración de nombres de usuario es posible evadiendo el CAPTCHA en la solución SureMDM local en implementaciones de Windows, lo que permite al atacante enumerar información de usuarios locales a través de mensajes de error. Este problema afecta a SureMDM local: versión 6.31 y...

CVE-2021-34473-scanner

CVE-2021-34473-스캐너 CVE-2021-34473, ProxyShell, Microsoft Exchange 온프레미스 취약점을 위한 스캐너 머신을 하나씩 테스트하려면 scanner-CVE-2021-34473.bat를 사용하십시오: scanner-CVE-2021-34473.bat mail.exemple.fr 여러 머신을 동시에 테스트하려면 mass-scanner를 사용하고 servers-to-check.txt에 확인할 IP/FQDN을 한 줄씩 추가하십시오: mass-scanner-CVE-2021-34473.bat...

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

CVE-2026-15933

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext, allowing an authenticated administrator to view previously configured passwords—SMTP , FTP (scan delivery), Active Directory (user list import), and SharePoint —in cleartext through the web administration panel p...

TeamPass

Teampass チーム全体が信頼できるセルフホスト型パスワード管理 フォルダーレベルのアクセス制御・認証付きAES-256-GCM暗号化・コンプライアンス証跡 あなたのシークレットがインフラの外に出ることはありません。 🌐teampass.net · 📖ドキュメント · 💬ディスカッション · 🐳Docker Hub !Security policyhttps://img.shields.io/badge/Security-policy&advisories-3fb950?style=for-the...

vulnerabilities in Adobe Campaign Classic

Adobe has identified vulnerabilities in Adobe Campaign Classic ACC. The first vulnerability relates to incorrect authorization in ACC’s core authorization mechanisms, allowing attackers to execute arbitrary code without any user interaction. This means that attackers can perform actions beyond th...

EUVD-2026-51200

IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-12118

CVE-2026-12118 affects IBM webMethods Integration (on-prem) versions 10.15 and 10.11 due to deserialization of untrusted data in the bundled WmServiceMock package, allowing an unauthenticated remote attacker to execute arbitrary code. There is no product patch; remediation is to remove the WmServ...

EUVD-2026-49334

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-47007

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications component: On-premise Deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logo...

PT-2026-62172

Name of the Vulnerable Software and Affected Versions Oracle Communications Pricing Design Center versions 15.0.0.0.0 through 15.2.0.0.0 Description A flaw in the On-premise Deployment component allows a low-privileged attacker with access to the infrastructure where the software executes to...

Vulnerabilities in Microsoft Exchange

Microsoft has addressed vulnerabilities in Exchange, both Online and on-premise versions. A malicious individual could exploit these vulnerabilities to impersonate other users, gain elevated privileges, execute arbitrary code, and thereby access sensitive data. The vulnerability in Exchange Onlin...

PYSEC-2026-1217 BBOT's gitlab.py exposes globally configured "gitlab" API key

Summary bbot's gitlab.py sends the user's "gitlab" API key to on-premise GitLab instances. If a user has configured a gitlab.com API key using this mechanism, it may be leaked to an attacker-controlled server. Impact A user with a "gitlab" API key configured who uses bbot to scan a malicious...

CVE-2026-44744

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

EUVD-2026-35281

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

CVE-2026-44744

Affected software : SAP S/4HANA On-Premise. Vulnerability : SQL injection in a remote-enabled function module component. Root cause / what’s vulnerable : An authenticated attacker could influence SQL queries via the affected function module, potentially enabling unauthorized database queries. Imp...