Exploit for Code Injection in Vmware Spring_Framework

No description...

Exploit for Improper Input Validation in Vmware Vcenter_Server

No description provided...

Privilege Escalation

github.com/kubernetes-sigs/image-builder is vulnerable to privilege escalation. The vulnerability is due to default root credentials being enabled during the Windows image build process with Nutanix or VMware OVA providers, which allows an attacker with access to the build VM to modify the image...

Exploit for Out-of-bounds Write in Vmware Cloud_Foundation

CVE-2021-21974 Vulnerability Detector A Python-based security...

VulnCheck KEV: CVE-2022-22957

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities CVE-2022-22957 & CVE-2022-22958. A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote...

The provided one-time code is incorrect. Check if the backup server time is correct.

Challenge When attempting to connect to the Veeam Host Management Console, after entering the MFA TOTP code, the following error occurs: The provided one-time code is incorrect. Check if the backup server time is correct. Solution There are two potential causes for time mismatch: Cause 1:...

Linux Distros Unpatched Vulnerability : CVE-2020-28972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers in the vmware.py files does not always validate the SSL/TLS...

CVE-2025-58126

Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic...

CVE-2025-58126

Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic...

CVE-2025-58126

CVE-2025-58126 affects the Checkmk Exchange plugin for VMware vSAN. The root cause is improper certificate validation (TLS/SSL) in the plugin, which permits a man-in-the-middle attacker to intercept traffic. Documented impact is exposure of communications in MitM scenarios; exploitation details a...

CVE-2025-58126 Lack of TLS validation in plugin VMware vSAN on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic...

Checkmk Exchange plugin VMware vSAN 安全漏洞

Checkmk Exchange plugin VMware vSAN is a plugin for device status monitoring from Checkmk Germany. A security vulnerability exists in Checkmk Exchange plugin VMware vSAN that stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...

PT-2025-35082

Name of the Vulnerable Software and Affected Versions Checkmk Exchange plugin VMware vSAN affected versions not specified Description The Checkmk Exchange plugin for VMware vSAN contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM position...

CVE-2025-58126: Improper Certificate Validation

Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic...

VMware ESXi Cloud Foundation XSS

The vulnerabilities of VMware ESXi, VMware vCenter Server, and Cloud Foundation programs are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to perform cross-site scripting attacks XSS remotely...

VMware NSX Network Virtualization XSS

The vulnerability of the user interface of the VMware NSX networking virtualization platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

VMware NSX Network Virtualization XSS

The vulnerability of the user interface of the VMware NSX networking virtualization platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

VMware vCenter Server DoS

The vulnerability of the software for managing VMware vCenter Server infrastructure is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

VMware Cloud Foundation Port 443 Unauthorized Access

The vulnerability of Port 443 component of the VMware Cloud Foundation virtualization platform relates to the possibility of bypassing the catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

VMware Cloud Foundation Port 443 Unauthorized Access

The vulnerability of Port 443 on the VMware Cloud Foundation virtualization platform is related to information disclosure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...