140 matches found
CVE-2025-34284 Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin
Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...
PT-2025-44522
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R2 Description Nagios XI versions prior to 2024R2 have a command injection issue in the WinRM plugin. A lack of proper validation of user-supplied parameters allows an authenticated administrator to inject shell...
CVE-2025-34284: Improper Neutralization of Special Elements used in an OS Command
Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...
CVE-2024-14008: Improper Neutralization of Special Elements used in an OS Command
Nagios XI versions prior to 2024R1.3.2 contain a remote command execution vulnerability in the WinRM Configuration Wizard. Insufficient validation of user-supplied input allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations...
EUVD-2021-13795
Malware in sbrugna...
EUVD-2018-3765
Malware in sbrugna...
Cleartext Storage of Sensitive Information
Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information via the cert.NewLeaf function. An attacker can obtain sensitive private key material by intercepting certificates transmitted in plaintext during a TLS handshake, allowing impersonation of eith...
Cleartext Storage of Sensitive Information
Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information via the cert.NewLeaf function. An attacker can obtain sensitive private key material by intercepting certificates transmitted in plaintext during a TLS handshake, allowing impersonation of eith...
WinRM Command Runner
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'net/winrm/connection' class MetasploitModule 'WinRM Command Runner', 'Description' = %q This module runs arbitrary Windows commands using the WinRM Service ,...
Puppet Enterprise < 2019.8.8 / 2021.3.0 Information Disclosure Vulnerability
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes. Note that Nessus has not tested for this issue but has instead...
Metasploit Weekly Wrap up
Unauthenticated RCE in VMware Product This week, community contributor h00die added an exploit module that leverages a command injection vulnerability in VMWare Aria Operations for Networks, formerly known as vRealize Network Insight. Versions 6.2 to 6.10 are vulnerable CVE-2023-20887. A remote...
June 13, 2023—KB5027222 (OS Build 17763.4499) - EXPIRED
None None...
April 25, 2023—KB5025298 (OS Build 22000.1880) Preview
None None...
April 11, 2023—KB5025230 (OS Build 20348.1668)
None None...
com.cloudcoreo.plugins:cloudcoreo-deploytime (>=0.1.0, <=0.2.3), com.spcow.plugins:winrm-client (1.0) +50 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.651.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.651.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudcoreo.plugins:cloudcoreo-deploytime =0.1.0, =0.10.0, =1.2, =1.4.2, =1.5.0, =1.0, =1....
Pywirt - Python Windows Incident Response Toolkit
With this application, it is aimed to accelerate the incident response processes by collecting information in windows operating systems via winrm. Features Information is collected in the following contents. IP Configuration Users Groups Tasks Services Task Scheduler Registry Control Active TCP &...
com.cloudcoreo.plugins:cloudcoreo-deploytime (>=0.1.0, <=0.2.3), com.spcow.plugins:winrm-client (1.0) +50 more potentially affected by CVE-2020-2160 via org.jenkins-ci.main:jenkins-core (1.651.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.651.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudcoreo.plugins:cloudcoreo-deploytime =0.1.0, =0.10.0, =1.2, =1.4.2, =1.5.0, =1.0, =1....
LACheck - Multithreaded C# .NET Assembly Local Administrative Privilege Enumeration
Multithreaded C .NET Assembly Local Administrative Privilege Enumeration Arguments domain controller to query if not ran on a domain-joined host /domain - specify domain name if not ran on a domain-joined host /edr - check host for EDR requires smb, rpc, or winrm /logons - return logged on users ...
Exploit for Use After Free in Microsoft
PoC exploit for CVE-2021-31166, a Windows HTTP protocol stack re...
Metasploit Wrap-Up
Vulnerability is in the eye of the beholder Exploiting firmware authored by UDP Technology and provided to multiple large OEMs including Geutebruck, community contributor TrGFxX has authored a neat module that allows RCE as root on machines running the web interface of the Geutebruck G-Cam and...