cis-vsphere

🦍 CIS vSphere Una herramienta para evaluar el cumplimiento de un entorno VMware vSphere con respecto al CIS Benchmark para VMware vSphere. Requisitos VMware PowerCLI 12.0.0 o superior VMware vSphere 7.0 Acceso de lectura al vCenter o host ESXi Uso 1. Clona el repositorio y navega a la carpeta:...

CVE-2021-21985_PoC

Dettagli della vulnerabilità VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE CVE-2021-21985 Il client vSphere HTML5 contiene una vulnerabilità di esecuzione remota di codice in un plugin di vCenter Server. Un attore malintenzionato con accesso di rete alla porta 443 può sfruttare quest...

CVE-2021-21985_PoC

CVE-2021-21985 Codice vulnerabile CLASS/METHODs disponibili, un piccolo esempio a scopo di PoC: com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported...

vcenter-cve-2021-21980-lab

CVE-2021-21980 Ambiente di test vulnerabile Panoramica Ambiente di test realistico che simula la vulnerabilità di path traversal del client Web VMware vSphere. ⚠️ AVVISO: Ambiente di test vulnerabile. NON esporre a internet! Avvio rapido Costruzione ed esecuzione root@kitploit: podman build -t...

SharpSphere

SharpSphere - Attacco all'infrastruttura vSphere Crediti @jkcoote & @grzryc Guida completa ed esempi disponibili qui. Cronologia versioni 1.0 - Versione iniziale 2.0 - Aggiunto supporto per l'autenticazione pass-through tramite SSPI. 2.1 - Aggiunto supporto per VM target Linux con --linux, e...

CVE-2021-21972

CVE-2021-21972 vCenter CVE-2021-21972 के लिए प्रूफ ऑफ कॉन्सेप्ट एक्सप्लॉइट शोध श्रेय: https://swarm.ptsecurity.com/unauth-rce-vmware/, http://noahblog.360.cn/vcenter-6-5-7-0-rce-lou-dong-fen-xi/ विंडोज और यूनिक्स vCenter VCSA लक्ष्यों दोनों पर परीक्षण किया गया। उपयोग हानिरहित रूप से जांचने के लिए...

CVE-2020-27688

CVE-2020-27688 परिचय RVTools एक एप्लिकेशन है जो Robware.net द्वारा विकसित किया गया है और .NET 4.6.1 में लिखा गया है। यह vSphere वातावरणों के साथ इंटरैक्ट करता है ताकि CSV या XLSX प्रारूप में जानकारी निकाल सके। इसे GUI के माध्यम से या इनपुट CSV फ़ाइल का उपयोग करके चलाया जा सकता है जिसमें vSphere...

cve-2021-21985_exp

exploit do cve-2021-21985 0x01 Ponto da vulnerabilidade Análise disponível em: https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985?referrer=homerapid7-analysis 0x02 exploit Reconstruir objetos beans para realizar RCE. Lista de beans: root@kitploit: localizedMessageBundle vsanWorkerThreadFacto...

cve-2021-21980-mock-server

Clippy of the Dead – CVE-2021-21980 Testumgebung und Nuclei-Vorlage ======================================================================= Dieses Repository enthält eine hochzuverlässige Nuclei-Vorlage zum Erkennen von CVE-2021-21980 Path Traversal im vSphere Web Client sowie eine kleine...

VMware vSphere - Server-Side Request Forgery

VMware vSphere HTML5 is susceptible to server-side request forgery due to improper validation of URLs in a vCenter Server plugin. An attacker with network access to port 443 can exploit this issue by sending a POST request to the plugin. This affects VMware vCenter Server 7.x before 7.0 U1c, 6.7...

presentations

Le mie presentazioni Altre cose si trovano sul mio sito personale: https://sites.google.com/site/zhiniangpeng root@kitploit: Sfruttare le vulnerabilità di RCE pre-autenticazione e sandbox escape in EXSi, Typhooncon 2023 Gli oggetti OLE sono ancora pericolosi oggi — Sfruttare Microsoft Office, POC...

CVE-2021-21985

CVE-2021-21985 Il client vSphere HTML5 contiene una vulnerabilità di esecuzione remota di codice dovuta alla mancanza di convalida dell'input nel plug-in Virtual SAN Health Check, abilitato per impostazione predefinita in vCenter Server. VMware ha valutato la gravità di questo problema...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, spicedb, kube-rbac-proxy, cloud-provider-gcp-cloud-controller-manager, kube-vip-cloud-provider, cluster-api, kubernetes, flux-helm-controller, metrics-server, cluster-api-azure-controller, zot, tetragon, kubescape, grafana,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tempo, cni-plugins, tflint, trivy, lazydocker, cloud-provider-gcp-cloud-controller-manager, ratify, cluster-api-azure-controller, nri-f5, zot, nri-nginx, kapp, ipfs-cluster, k3d, kube-bench, kubernetes-csi-driver-nfs, mockgen, nginx-prometheus-exporter,...

CVE-2026-67261

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

CVE-2026-54489

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This...

CVE-2026-54489

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This...

CVE-2026-54489

Dell Virtual Storage Integrator for VMware vSphere Client (pre-10.11.1.0) contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially disclose information and hijack active sessions, impersonating users (including admins). Dell recommends upgrad...

CVE-2026-67261

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

EUVD-2026-53930

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...