CVE-2025-53770-Scanner

🛡️ CVE-2025-53770 SharePoint 취약점 스캐너 CVE-2025-53770 의 영향을 받는 취약한 Microsoft SharePoint 인스턴스를 탐지하는 Python 기반 도구입니다. 이는 ToolPane.aspx 엔드포인트를 통해 트리거되는 안전하지 않은 역직렬화Insecure Deserialization 취약점입니다. 이 스캐너는 대상이 내부 직렬화 객체를 유출하는지 확인하기 위해 제작된 압축 ViewState 페이로드를 전송합니다. 🚀 기능 ✅ CVE-2025-53770에 취약한 SharePoint...

CVE-2026-26333

Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs including EndeavorServer.rem and RemoteFileReceiver.rem and permits the use of SOAP and binary formatters with TypeFilterLevel set to Full. An...

CVE-2026-26335 Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE

Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\Program Files x86\Veramark\VeraSMART\WebRoot\web.config. An attacker who obtains these keys can craft a valid ASP.NET ViewState payload that passes...

CVE-2024-5675

Untrusted data deserialization vulnerability has been found in Mentor - Employee Portal, affecting version 3.83.35. This vulnerability could allow an attacker to execute arbitrary code, by injecting a malicious payload into the “ViewState” field...

CVE-2023-41642

Multiple reflected cross-site scripting XSS vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWSTATE parameter...