CVE-2020-0618

CVE-2020-0618 RCE en SQL Server Reporting Services CVE-2020-0618 Verificación de vulnerabilidad POC Se puede enviar la siguiente solicitud HTTP al servidor para explotar la aplicación: root@kitploit: POST /ReportServer/pages/ReportViewer.aspx HTTP/1.1 Host: target Content-Type:...

CVE-2025-30406

Parte 1: Exploit root@kitploit: λ CVE-2025-30406.exe rce.txt...

CVE-2020-0688

CVE-2020-0688 Existe una vulnerabilidad de ejecución remota de código en Microsoft Exchange Server cuando el servidor no logra crear claves únicas correctamente en el momento de la instalación. El conocimiento de la clave de validación permite que un usuario autenticado con buzón de correo pase...

sharepoint-toolshell-micro-postmortem

Micro-Postmortem de Incidente — Campaña “ToolShell” de Microsoft SharePoint On-Prem Este kit realiza el triaje de la campaña de día cero “ToolShell” de mediados de 2025 contra Microsoft SharePoint Server local on-premises ; SharePoint Online queda fuera de alcance. Proporciona búsquedas hunts,...

CVE-2025-53770-Exploit

CVE-2025-53770-Exploit Primero, obtén los valores de VIEWSTATEGENERATOR, VALIDATIONKEY y VALIDATIONALG de la página de SharePoint objetivo: root@kitploit: curl -s https://target.com/layouts/15/start.aspx | grep -oP 'VIEWSTATEGENERATOR" value="\K^"+' curl...

CVE-2025-53690-Analysis

CVE-2025-53690: Análisis de la vulnerabilidad de deserialización de ViewState en Sitecore Resumen CVE-2025-53690 es una vulnerabilidad de deserialización de ViewState descubierta en la familia de productos Sitecore. Al explotar una machine key de ASP.NET expuesta, permite la ejecución remota de...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner by DanSec A simple, effective reconnaissance tool to identify potential exposure to the critical SharePoint vulnerability CVE-2025-53770. !Warning This tool is intended for authorised testing purposes only. The author DanSec takes no responsibility for misuse or damage caus...

cve-2020-0688

cve-2020-0688 cve-2020-0688 Inicia sesión con un usuario con privilegio de dirección de correo electrónico; no hay nada de qué preocuparse. Obtén - VIEWSTATEGENERATOR del código fuente de la página Obtén - el valor de la cookie ASP.NETSessionId para el valor viewstateuserkey Descargar YSO aquí...

CVE-2020-0688

CVE-2020-0688 Ejecución remota de código RCE en Microsoft Exchange Server mediante clave criptográfica fija En lugar de tener claves generadas aleatoriamente por instalación, todas las instalaciones de Microsoft Exchange Server tienen los mismos valores validationKey y decryptionKey en web.config...

Blackash-CVE-2025-53770

🧠 CVE-2025-53770 : Vulnerabilidad crítica de RCE en SharePoint explotada mediante falsificación de ViewState 📌 Resumen de la vulnerabilidad Tipo : Ejecución remota de código RCE Puntuación CVSS : 9.8 Crítico Componente : Microsoft SharePoint Server local Causa raíz : Deserialización insegura de...

CVE-2026-57527 ZAP ViewState Add-on Insecure Deserialization via JSFViewState.decode()

Zed Attack Proxy ZAP ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java object in the javax.faces.ViewState HTTP response parameter...

PT-2026-52794

Zed Attack Proxy ZAP ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java object in the javax.faces.ViewState HTTP response parameter...

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System LMS popular in Japan, was exploited as a zero-day to deliver the Godzilla web shell and ultimately facilitate the deployment of Cobalt Strike Beacon. The vulnerability, tracked as...

VulnCheck KEV: CVE-2026-5426

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...

CVE-2026-5426

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...

EUVD-2026-23271

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...

CVE-2026-5426

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...

CVE-2026-5426

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...

CVE-2026-5426 KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...

CVE-2025-71260

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serialized objects to the VIEWSTATE paramete...