506 matches found
CVE-2025-41244
CVE-2025-41244 VMware Aria Operations 和 VMware Tools 包含一个本地权限提升漏洞。具有非管理员权限的恶意本地攻击者，如果能够访问安装了 VMware Tools 且由启用了 SDMP 的 Aria Operations 管理的虚拟机，则可能利用此漏洞将同一虚拟机上的权限提升至 root。 如何运行此脚本？ 1. 从此处下载 Nuclei 2. 将模板复制到你的本地系统 3. 运行以下命令：nuclei -u https://yourHost.com -t template.yaml 参考链接...
SharpSphere
SharpSphere - 攻击vSphere基础设施 致谢 @jkcoote 和 @grzryc 完整的操作指南与示例请参见此处。 版本历史 1.0 - 初始发布 2.0 - 新增对使用SSPI的直通认证的支持。 2.1 - 新增对Linux目标虚拟机的支持（使用--linux），并添加了--verbose标志用于列出vCenter用户和组 简介 SharpSphere 为红队成员提供与 vCenter 管理的虚拟机客户操作系统的简便交互能力。它利用 vSphere Web Services API 并公开以下功能： 命令与控制 - 结合 F-Secure 的...
CVE-2025-41244-PoC
PoC CVE-2025-41244 VMware Aria Operations &1" VERSIONEND done Extracto de get-versions.sh líneas 119-124: root@kitploit: getversion "/\S+/httpd-prefork|httpd|httpd2-prefork$|\s" -v getversion "/usr/bin|sbin/apache\S" -v getversion "/\S+/mysqld$|\s" -V getversion ".?/\Snginx$|\s" -v getversion...
Astra Linux – Vulnerability in open-vm-tools
VMware Tools 12.0.0, 11.x.y, and 10.x.y contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the guest OS can escalate privileges as a root user in the virtual machine...
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
...
Security Bulletin: IBM DataPower Gateway affected by local privilege escalation due to VMware Tools (CVE-2025-41244)
Summary IBM DataPower Gateway affected by local privilege escalation due to VMware Tools CVE-2025-41244 Vulnerability Details CVEID:CVE-2025-41244 DESCRIPTION: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrati...
Virtuozzo Infrastructure 7.3 Update 1 Hotfix 1 (7.3.1-60)
This update provides security and stability fixes. Vulnerability id: VSTOR-123887 Stale S3 lifecycle timestamps could cause objects to expire at incorrect times. Vulnerability id: VSTOR-127098 The Keystone service could fail to restart after log rotation. Vulnerability id: VSTOR-129336 A stabilit...
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate...
[SECURITY] Fedora 42 Update: open-vm-tools-13.0.10-2.fc42
The open-vm-tools project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and...
[SECURITY] Fedora 43 Update: open-vm-tools-13.0.10-2.fc43
The open-vm-tools project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and...
Alibaba Cloud Linux 3 : 0019: open-vm-tools (ALINUX3-SA-2026:0019)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0019 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-22247: VMware Tools contains an insecure...
MiracleLinux 9 : open-vm-tools-12.3.5-2.el9 (AXBA:2024-8096:03)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXBA:2024-8096:03 advisory. - VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges...
CVE-2022-31693
VMware Tools for Windows 12.x.y prior to 12.1.5, 11.x.y and 10.x.y contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest OS, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a...
TencentOS Server 4: open-vm-tools (TSSA-2025:0401)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0401 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a high-severity security flaw impacting Broadcom VMware Tools and VMware Aria Operations to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation in the wild. The vulnerability in...
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this...
TencentOS Server 4: open-vm-tools (TSSA-2025:0776)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0776 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Alibaba Cloud Linux 3 : 0159: open-vm-tools (ALINUX3-SA-2025:0159)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0159 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-41244: VMware Aria Operations and VMware...
Amazon Linux 2023 : open-vm-tools, open-vm-tools-desktop, open-vm-tools-devel (ALAS2023-2025-1226)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1226 advisory. VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed...
