213 matches found
cis-vsphere
🦍 CIS vSphere VMware vSphere 환경의 CIS Benchmark 준수 여부를 평가하는 도구입니다. 요구 사항 VMware PowerCLI 12.0.0 이상 VMware vSphere 7.0 vCenter 또는 ESXi 호스트에 대한 읽기 권한 사용 방법 1. 저장소를 클론하고 폴더로 이동하세요: git clone https://github.com/karimhabush/cis-vsphere.git cd cis-vsphere 2. PowerCLI 설치: Install-Module -Name...
cve-2021-21985_exp
cve-2021-21985 エクスプロイト 0x01 脆弱性ポイント 分析から分かること： https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985?referrer=homerapid7-analysis 0x02 エクスプロイト beansオブジェクトを再構築し、RCEを実現する。 beanリスト： localizedMessageBundle vsanWorkerThreadFactory vsanThreadPoolImpl vsanServiceBundleActivator vsanServiceFactory...
vcenter-cve-2021-21980-lab
CVE-2021-21980 脆弱性テスト環境 概要 VMware vSphere Web Client のパストラバーサル脆弱性をシミュレートする現実的なテスト環境です。 ⚠️ 警告: 脆弱性テスト環境です。インターネットに公開しないでください！ クイックスタート ビルドと実行 podman build -t vcenter-lab . podman run -d -p 443:443 --name vcenter-lab vcenter-lab 手動テスト curl -k...
CVE-2026-67261
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...
CVE-2026-54489
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This...
CVE-2026-54489
Dell Virtual Storage Integrator for VMware vSphere Client (pre-10.11.1.0) contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially disclose information and hijack active sessions, impersonating users (including admins). Dell recommends upgrad...
EUVD-2026-53930
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...
CVE-2026-67261
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...
CVE-2026-67261
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...
CVE-2026-67261
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...
CVE-2026-67261: Improper Neutralization of Special Elements used in an OS Command
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...
CVE-2026-54489: Exposure of Sensitive Information to an Unauthorized Actor
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This...
The vulnerability of the monitoring tools for VMware Aria Operations, VMware Cloud Foundation, and VMware vSphere Foundation – virtualization platforms; and VMware Telco Cloud Platform, a telecommunications cloud platform – arises from the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the monitoring tools for VMware Aria, VMware Cloud Foundation, and VMware vSphere Foundation, as well as VMware Telco Cloud Platform, a telecommunications cloud platform, is related to the lack of security measures for website structures. Exploiting this vulnerability allows ...
The vulnerability of the monitoring tools for VMware Aria Operations, VMware Cloud Foundation, and VMware vSphere Foundation – virtualization platforms; and VMware Telco Cloud Platform, a telecommunications cloud platform – arises from the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the monitoring tools for VMware Aria, VMware Cloud Foundation, and VMware vSphere Foundation, as well as VMware Telco Cloud Platform, a telecommunications cloud platform, is related to the lack of security measures for the website structure. Exploiting this vulnerability allo...
CVE-2021-22018
The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A malicious actor with network access to port 9087 on vCenter Server may exploit this issue to delete non critical files...
CVE-2022-23235
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...
CVE-2022-23239
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting XSS attack...
CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday released details of a backdoor named BRICKSTORM that has been put to use by state-sponsored threat actors from the People's Republic of China PRC to maintain long-term persistence on compromised systems. "BRICKSTORM is a...