200 matches found
BADministration
BADministration What is BADministration? BADministration is a tool which interfaces with management or administration applications from an offensive standpoint. It attempts to provide offsec personnel a tool with the ability to identify and leverage these non-technical vulnerabilities. As always:...
CVE-2021-35215
CVE-2021-35215 SolarWinds Orion Platform ActionPluginBaseView Deserialization RCE, requires login. PoC root@kitploit: POST /Orion/RenderControl.aspx HTTP/1.1 Host: 192.168.137.130:8787 Content-Length: 3648 Cache-Control: max-age=0 Origin: http://192.168.137.130:8787 Upgrade-Insecure-Requests: 1...
solarflare
solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...
solarflare
solarflare Инструмент для дампа учётных данных SolarWinds Orion Пост в блоге: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Благодарности @asolino, @gentilkiwi и @skelsec за помощь в разборе DPAPI. root@kitploit:...
CVE-2020-10148-Solarwinds-Orion
CVE-2020-10148 Solarwinds Orion Scarica CVE-2020-10148.py root@kitploit: wget https://gist.githubusercontent.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965/raw/0d7db4f2ea5aacc0ada7b1a7b23f2ce8ba39315f/CVE-2020-10148.py Ricerca di Solarwinds Orion su Shodan root@kitploit:...
CVE-2020-10148
Como usar e isenção de responsabilidade Este script é um script de detecção em lote da vulnerabilidade de execução remota de código da API SolarWinds Orion CVE-2020-10148. Como usar: Python CVE-2020-10148.py urls.txt Cada url no urls.txt é uma linha, os endereços vulneráveis são salvos em vul.txt...
CISA Retires 10 Emergency Cybersecurity Directives Issued Between 2019 and 2024
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday said it's retiring 10 emergency directives Eds that were issued between 2019 and 2024. The list of the directives now considered closed is as follows - ED 19-01: Mitigate DNS Infrastructure Tampering ED 20-02: Mitigate...
CVE-2021-27258
This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SaveUserSetting endpoint. The issue results from improper...
CVE-2021-27277
This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...
CVE-2021-31475
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF...
CVE-2019-12864
SolarWinds Orion Platform 2018.4 HF3 NPM 12.4, NetPath 1.1.4 is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us=false query parameter...
CVE-2019-12954
SolarWinds Network Performance Monitor Orion Platform 2018, NPM 12.3, NetPath 1.1.3 allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT...
EUVD-2019-7585
Malware in sbrugna...
EUVD-2019-7586
Malware in sbrugna...
EUVD-2020-20363
Malware in sbrugna...
EUVD-2019-4443
Malware in sbrugna...
EUVD-2021-15337
Malware in sbrugna...
EUVD-2010-4793
Malware in sbrugna...