CVE-2025-69516

CVE-2025-69516 - Exécution de code à distance dans Tactical RMM Ce dépôt contient un script Python qui automatise l'exploitation de la vulnérabilité SSTI CVE-2025-69516 dans Tactical RMM. Il a été testé sur la version 1.3.1. Utilisation python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id"...

fleet-cve-scanner

fleet-cve-scanner Un scanner CVE open-source, mono-script pour les parcs gérés par RMM. PowerShell 7 pur, sans agents, sans appliances, sans frais de licence. Il répond à une question pour chaque logiciel sur chaque poste que vous gérez : la version installée est-elle connue comme vulnérable, et...

Ransomware-Tool-Matrix

Матрица инструментов программ-вымогателей Этот репозиторий содержит список инструментов, которые использует каждая группировка программ-вымогателей или группировка вымогателей. Как защитники, мы должны использовать тот факт, что многие инструменты, используемые этими киберпреступниками, часто...

N-able N-central < 2026.3.1.10 - Authentication Bypass

N-able N-central versions through 2026.3.1 contain an authentication bypass that lets a remote unauthenticated attacker take over an administrator account and gain full control of the N-central server. CVE-2026-18577 is a bypass of the incomplete fix for CVE-2026-18556, so the 2026.3.1 Hotfix 1...

dRMM-CVE-2020-1350-response

Обзор Microsoft объявила о CVE-2020-1350 14 июля 2020 года. Эта уязвимость в DNS-сервере Windows восходит к Server 2003 и, по общему мнению, является червеобразной wormable. Этот скрипт следует инструкциям из KB456509...

LOLRMM

LOLRMM - Living Off the Land Remote Monitoring and Management 🖥️🔍 Welcome to LOLRMM Living Off the Land Remote Monitoring and Management, a community-driven project that provides a curated list of Remote Monitoring and Management RMM tools that could potentially be abused by threat actors. Our...

Serious-Sam---CVE-2021-36934-Mitigation-for-Datto-RMM

Aperçu Ceci est un composant Datto RMM pour atténuer CVE-2021-36934, également connu sous le nom de Serious SAM. Il suit les mesures d'atténuation décrites sur : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 À UTILISER À VOS PROPRES RISQUE...

CVE-2025-69516

CVE-2025-69516 - Удаленное выполнение кода в Tactical RMM Этот репозиторий содержит Python-скрипт, который автоматизирует эксплуатацию уязвимости SSTI CVE-2025-69516 в Tactical RMM. Он был протестирован на версии 1.3.1. Использование python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id" Ссылк...

CVE-2026-86218-N-central-IOC-Toolkit

CVE-2026-86218 — N-able N-central 사전 인증 RCE | IOC 및 탐지 툴킷 CVSS 10.0 치명적 · 사전 인증 원격 코드 실행 · 정적 코드 주입 CWE-96 · 실제 악용 중 · CISA KEV -yellow 유지관리자: @jithinkrishnanrs · 저장소: github.com/jithinkrishnanrs/CVE-2026-86218-N-central-IOC-Toolkit CVE-2026-86218 — 관리형 서비스 제공업체MSP가 널리 사용하는 온프레미스 및 호스팅 원격 모니터링 및...

Exploit for Static Code Injection in N-Able N-Central

CVE-2026-86218 — N-able N-central Pre-Authentication RCE | IOC...

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet formerly UNC5669 since 2024. Google Threat Intelligence Group GTIG and Mandiant teams described the threat actor as "specializing in manipulating...

MINI-RMM5-9MCG-FWWV

Bulletin has no description...

N-able N-central authorization issue vulnerability

N-able N-central is a remote monitoring and management system developed by the Canadian company N-able. Versions of N-able N-central prior to 2026.1 contained security vulnerabilities. Attackers could exploit these vulnerabilities to bypass authentication processes...

From cause to cash: a cross-border look at hacktivist activity

While tracking the activities of 4BID we uncovered a new string of campaigns that appear to be the work of several interconnected actors. While politically motivated groups generally limit their scope to specific nations – for 4BID and its peers, primarily Russian and occasionally Belarusian...

EUVD-2026-23116

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

CVE-2026-22676

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

CVE-2026-22676 Barracuda RMM < 2025.2.2 Privilege Escalation via Insecure Directory Permissions

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

Barracuda RMM 安全漏洞

Barracuda RMM is a remote monitoring and management platform developed by the American company Barracuda. Versions of Barracuda RMM prior to 2025.2.2 contained security vulnerabilities. These vulnerabilities stemmed from excessive permissions in the file system access control list, which could...

CVE-2026-22676: Incorrect Permission Assignment for Critical Resource

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

Metasploit Wrap-Up 03/06/2026

Encoder exposed! Some of our releases add new ways in; this one adds new ways to stay in. There are, of course, still new RCE toys in the box Tactical RMM via Jinja2 SSTI and an unauthenticated MajorDoMo exploit. Still, the underlying theme is payloads: more control over how they are packaged and...