SCCMSecrets

SCCMSecrets SCCMSecrets.py는 SCCM 정책을 악용하는 도구입니다. NAANetwork Access Account 자격 증명 추출을 넘어, SCCM 정책 배포와 관련된 보안 오설정을 포괄적으로 찾아내는 것을 목표로 합니다. 이 도구는 다양한 권한 수준에서 실행할 수 있으며, 정책 배포와 관련된 잠재적 오설정을 찾으려 시도합니다. 도구 및 사용법에 대한 자세한 내용은 관련 문서를 참조하세요:...

EUVD-2026-16559

When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain component is directory partial. This allows inadvertently reading /etc/passwd or some other pa...

The vulnerability of the bound_principal_iam component in the Access Control System Vault and the Vault Enterprise platform for archiving corporate information allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the boundprincipaliam component in the Access Control System Vault and the Corporate Information Archiving Platform Vault Enterprise involves exploiting authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumven...

[slackware-security] cups

New cups packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/cups-2.4.14-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Blocked authentication using alternate methods in cupsd...

CVE-2025-54999

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, when using OpenBao's userpass auth method, user enumeration was possible due to timing difference between non-existent users an...

CVE-2025-54999 OpenBao: Timing Side-Channel in Userpass Auth Method

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, when using OpenBao's userpass auth method, user enumeration was possible due to timing difference between non-existent users an...