monkey

Monkey documentation This folder contains the Monkey Documentation site. For more information see content/development/contribute-documentation.md...

CVE-2018-19321

CVE-2018-19321 CVE-2018-19321 Descrizione I driver di basso livello GPCIDrv e GDrv in GIGABYTE APP Center v1.05.21 e versioni precedenti, AORUS GRAPHICS ENGINE prima della 1.57, XTREME GAMING ENGINE prima della 1.26 e OC GURU II v2.08 espongono funzionalità per leggere e scrivere memoria fisica...

msi-central_privesc

CVE-2022-38532 Privilege escalation locale nell'applicazione desktop MSI Center. La vulnerabilità risiede in "CFeatures" di MSI.CentralServer.exe. MSI.CentralServer.exe è un'applicazione che raccoglie informazioni sul sistema, collaborando con MSI.TerminalServer.exe. La funzione ExecuteTask, che...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 Questo repository tratta dello sfruttamento zero-day di Atlassian Confluence, con un punto di vista difensivo e di analisi dalla prospettiva di un team SecOps o Blue Team Indice Informazioni Cronologia Comprendere l'exploit Elenco degli IOC Strategia di rilevamento Piani...

CVE-2022-26134

CVE-2022-26134 - OGNL-Injection-Schwachstelle. In betroffenen Versionen von Confluence Server und Data Center existiert eine OGNL-Injection-Schwachstelle, die es einem nicht authentifizierten Angreifer ermöglichen würde, beliebigen Code auf einer Confluence Server- oder Data Center-Instanz...

CVE-2022-26134

CVE-2022-26134 - OGNL-Injection-Schwachstelle: Proof-of-Concept-Skript, das die Remote-Codeausführungs-Schwachstelle ausnutzt, die Atlassian Confluence 7.18 und niedrigere Versionen betrifft. Die OGNL-Injection-Schwachstelle ermöglicht es einem nicht authentifizierten Benutzer, beliebigen Code au...

CVE-2022-26133

CVE-2022-26133 Informationen Beschreibung Der SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center in den Versionen 5.14.0 bis unter 7.6.14, 7.7.0 bis unter 7.17.6, 7.18.0 bis unter 7.18.4, 7.19.0 bis unter 7.19.4 sowie 7.20.0 ermöglicht es einem entfernten, nicht authentifizierten...

CVE-2023-22527

CVE-2023-22527 CVE-2023-22527 - Vulnerabilità RCE Esecuzione di Codice Remoto nelle versioni datate di Confluence Data Center e Server Data di rilascio dell'avviso Tue, Jan 16 2024 01:00 EST Prodotti: Confluence Data Center Confluence Server Versioni Interessate: 8.0.x 8.1.x 8.2.x 8.3.x 8.4.x...

CVE-2023-22515-joaoviictorti

CVE-2023-22515 Panoramica Compilazione Utilizzo Esecuzione di CVE-2023-22515 Panoramica Confluence è un wiki aziendale basato sul web sviluppato dalla società australiana di software Atlassian. Atlassian è stata informata di un problema segnalato da alcuni clienti in cui attaccanti esterni...

CVE-2022-26134

CVE-2022-26134 POC Descrizione root@kitploit: In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. POC 1. Esegui python3 confluence.p...

CVE-2022-26134

CVE-2022-26134 Ein entfernter Angreifer kann ohne Authentifizierung einen OGNL-Ausdruck injizieren, um beliebigen Code auf Confluence Server oder Data Center auszuführen. Der POC wurde modifiziert, um ein Get-Shell zu ermöglichen. Häufiger Port: 8090 Betroffene Versionen Confluence Server and Dat...

CVE-2023-22515

CVE-2023-22515 Confluence Data Center & Server Privilege Escalation Vulnerability Exploit Verwendung root@kitploit: python3 CVE-2023-22515.py url username password Haftungsausschluss Dieses Prüfwerkzeug ist ausschließlich für Sicherheitstests durch Sicherheitstester von Sicherheitsunternehmen...

CVE-2025-63579

CVE-2025-63579 وصول غير مصرح به إلى جميع أسماء المستخدمين وكلمات المرور المُدخلة في ميزة دفتر العناوين الموجودة في طابعات Kyocera Command Center RX. الوصف الاستخدام غير المصرح به لطابعات Kyocera، يسمح بتصدير جميع المعلومات المخزنة في دفتر عناوين Kyocera. يمكن تجاوز الإجراء الأمني الذي يشفر البيان...

CVE-2021-26084

CVE-2021-26084 Descrizione - POC di CVE-2021-26084, che è una vulnerabilità di iniezione RCE Pre-Auth OGNL Object-Graph Navigation Language in Atlassian Confluence Server. - creato da antx il 13-01-2022. Dettagli - Nelle versioni interessate di Confluence Server e Data Center, esiste una...

CVE-2023-22527

CVE-2023-22527 Uno strumento di sfruttamento per attaccare i server Confluence vulnerabili a CVE-2023-22527 che porta a RCE, testato e provato come POC su istanze vulnerabili di Confluence Data Center e Server. Con questo, un attaccante può eseguire codice arbitrario sull'istanza vulnerabile...

Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure

Fides versions 2.19.0 to before 2.39.2rc0 contain an information disclosure caused by unauthenticated HTTP GET request to the Privacy Center, letting attackers access the SERVERSIDEFIDESAPIURL, which may reveal server configuration details, exploit requires no authentication. id: CVE-2024-31223...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

Extreme Management Center 8.4.1.24 - Cross-Site Scripting

Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...