EUVD-2018-7954

Malware in sbrugna...

EUVD-2024-40415

Malicious code in bioql PyPI...

EUVD-2024-19544

Malicious code in bioql PyPI...

EUVD-2022-37328

Malicious code in bioql PyPI...

EUVD-2021-7192

Malicious code in bioql PyPI...

EUVD-2022-53425

Malicious code in bioql PyPI...

EUVD-2022-31062

Malicious code in bioql PyPI...

EUVD-2022-36683

Malicious code in bioql PyPI...

EUVD-2025-10147

Malicious code in bioql PyPI...

KLA85520 ACE vulnerability in Microsoft System Center

A remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-47178 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Configuration-Manager CVE...

CVE-2023-22440

Incorrect default permissions in the IntelR SCS Add-on software installer for Microsoft SCCM all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32659

SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic files that could propagate out of the system and reach users who are subscribed to email notifications...

CVE-2022-32225

A reflected DOM-Based XSS vulnerability has been discovered in the Help directory of Veeam Management Pack for Microsoft System Center 8.0. This vulnerability could be exploited by an attacker by convincing a legitimate user to visit a crafted URL on a Veeam Management Pack for Microsoft System...

CVE-2020-1331

A spoofing vulnerability exists when System Center Operations Manager SCOM does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System Center Operations Manager Spoofing Vulnerability'...

KLA83714 PE vulnerability in Microsoft System Center

An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-47161 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Defender-for-Endpoint-for-Linux...

KLA83569 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Defender for...

SMB to HTTP relay version of Get NAA Creds

This module creates an SMB server and then relays the credentials passed to it to SCCM's HTTP server aka Management Point to gain an authenticated connection. Once authenticated it then attempts to retrieve the Network Access Accounts, if configured, from the SCCM server. This requires a computer...

The vulnerability of programs for managing and monitoring IT services such as Microsoft System Center Operations Manager, System Center Service Manager, System Center Orchestrator, System Center Data Protection Manager, and System Center Virtual Machine Manager lies in the use of an insecure search path, which allows an attacker to escalate their privileges.

The vulnerabilities of programs for managing and monitoring IT services such as Microsoft System Center Operations Manager, System Center Service Manager, System Center Orchestrator, System Center Data Protection Manager, and System Center Virtual Machine Manager are related to the use of an...

CVE-2025-27743

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...

Vulnerability fixed in Microsoft System Center

Microsoft has fixed a vulnerability in System Center. The vulnerability allows a malicious person through an untrusted path within System Center, to elevate local permissions. For successful exploitation, the malicious party must have access to the device to reach the System Center Windows...