200 matches found
BADministration
BADministration Что такое BADministration? BADministration - это инструмент, который взаимодействует с приложениями управления и администрирования с наступательной точки зрения. Он пытается предоставить специалистам по наступательной безопасности offsec инструмент для выявления и использования эт...
CVE-2021-35215
CVE-2021-35215 Солнечные ветры Orion Platform ActionPluginBaseView десериализация RCE, требуется вход. PoC root@kitploit: POST /Orion/RenderControl.aspx HTTP/1.1 Host: 192.168.137.130:8787 Content-Length: 3648 Cache-Control: max-age=0 Origin: http://192.168.137.130:8787 Upgrade-Insecure-Requests:...
solarflare
solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...
solarflare
solarflare Инструмент для дампа учётных данных SolarWinds Orion Пост в блоге: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Благодарности @asolino, @gentilkiwi и @skelsec за помощь в разборе DPAPI. root@kitploit:...
CVE-2020-10148
Использование и отказ от ответственности Это скрипт для массового обнаружения уязвимости удаленного выполнения кода в SolarWinds Orion API CVE-2020-10148. Использование: Python CVE-2020-10148.py urls.txt В файле urls.txt каждый URL на отдельной строке, уязвимые адреса выводятся в vul.txt Затронут...
CVE-2020-10148-Solarwinds-Orion
CVE-2020-10148 Solarwinds Orion Скачать CVE-2020-10148.py root@kitploit: wget https://gist.githubusercontent.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965/raw/0d7db4f2ea5aacc0ada7b1a7b23f2ce8ba39315f/CVE-2020-10148.py Поиск Solarwinds Orion через Shodan root@kitploit:...
CISA Retires 10 Emergency Cybersecurity Directives Issued Between 2019 and 2024
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday said it's retiring 10 emergency directives Eds that were issued between 2019 and 2024. The list of the directives now considered closed is as follows - ED 19-01: Mitigate DNS Infrastructure Tampering ED 20-02: Mitigate...
CVE-2021-27258
This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SaveUserSetting endpoint. The issue results from improper...
CVE-2021-27277
This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...
CVE-2021-31475
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF...
CVE-2019-12864
SolarWinds Orion Platform 2018.4 HF3 NPM 12.4, NetPath 1.1.4 is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us=false query parameter...
CVE-2019-12954
SolarWinds Network Performance Monitor Orion Platform 2018, NPM 12.3, NetPath 1.1.3 allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT...
EUVD-2019-7586
Malware in sbrugna...
EUVD-2019-4443
Malware in sbrugna...
EUVD-2019-7585
Malware in sbrugna...
EUVD-2021-15337
Malware in sbrugna...
EUVD-2020-20363
Malware in sbrugna...
EUVD-2010-4793
Malware in sbrugna...