CVE-2005-4773

The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service shutdown via the 1 halt, 2 poweroff, and 3 reboot scripts executed at the service console...

CVE-2025-27147

The CVE-2025-27147 issue affects the GLPI Inventory Plugin used with GLPI, where versions prior to 1.5.0 contain an improper access control vulnerability. Reported details across connected sources consistently point to an access-control weakness in GLPI Inventory Plugin tasks (network discovery, ...

Linux Variant of Helldown Ransomware Targets VMware ESX Servers

Cybersecurity firm Sekoia has discovered a new variant of Helldown ransomware. The article details their tactics and how…...

VMware Server Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware Server Directory Traversal Vulnerability', 'Description' = 'This modules exploits the VMware Server Directory Traversal vulnerability in...

Provisioning Services Target Devices Start with MAC Address as the Computer Name

When booting, VMware ESX target devices replace computer name with MAC Address...

SUSE CVE-2007-5360

Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUSUSEPAMSTANDALONEPROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than...

BIOS Based Provisioning Services Target Devices Boot Slow Within VMware ESX

BIOS based Provisioned Target Devices boot slow through single IO. Background This symptom appears random. It may occur on a single vm boot or many, for example: five out of ten vm's may boot as expected and the remaining five may boot anywhere from 5 to 60 minutes later. After boot when the Targ...

Cannot power on CachePoint, "Cannot open the disk 'UnideskLayers/..."

After host or storage failure, you may find that one or more CachePoints CP will not longer boot. The error message given by vCenter is: An error was received from the ESX host while powering on VM CP01. Cannot open the disk 'UnideskLayers/User/Desktop3/P14407081000000d8.B0.R1.V0-000001.vmdk' or...

WHMCS Addon VMPanel 2.7.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...

WHMCompleteSolution (WHMCS) Addon VMPanel 2.7.4 - SQL Injection

WHMCompleteSolution WHMCS Addon VMPanel 2.7.4 - SQL Injection ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...

VMPanel 2.7.4 SQL Injection

===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested O...

The vulnerability of VMWare Workstation’s software allows a malicious individual to compromise the accessibility of protected information.

The vulnerability in VMware Workstation, VMware Player, VMware Fusion, VMware ESXi, and VMware ESX allows users of these guest operating systems to trigger a service failure VMX process crash by using an invalid port...

VMware ESX Multiple Vulnerabilities (VMSA-2010-0015) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Berkeley DB NSS module - cURL / libcURL - GnuTLS - Network Security Services...

VMware ESX Multiple Vulnerabilities (VMSA-2010-0019) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - bzip2 - Network Security Services NSS Library - OpenSSL - Samba %NASLMINLEVE...

VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2010-0001) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Network Security Services NSS - NetScape Portable Runtime NSPR %NASLMINLEVEL...

VMware ESX Multiple Vulnerabilities (VMSA-2010-0007) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - A format string flaw exists in the VMware Remote Console that allows a remote attacker to execute arbitrary code. CVE-2009-3732 - A flaw exists in VMware Tools due to imprope...

VMware ESX Multiple Vulnerabilities (VMSA-2010-0013) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - GNU cpio - GNU cpio on 64-bit - GNU tar - Kerberos 5 - Perl - PostgreSQL -...

VMware ESX Java Runtime Environment (JRE) Multiple Vulnerabilities (VMSA-2010-0002) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the bundled version of the Java Runtime Environment JRE. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2011-0007) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - Multiple forgery vulnerabilities exist in the bundled version of MIT Kerberos 5 krb5. An attacker can exploit these issues to impersonate a client, escalate privileges...

VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0010) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including arbitrary code execution vulnerabilities, in several third-party components and libraries : - DHCP - glibc %NASLMINLEVEL 70300 C Tenable Network Security, Inc...