6319 matches found
ncentral-compromise-ioc-triage
N-central Compromise IoC Triage Read-only defensive hunting toolkit for post-exploitation artifacts associated with N-able N-central authentication bypass vulnerabilities CVE-2026-18556 and CVE-2026-18577. The PowerShell endpoint scanner flags indicators published by N-able and Huntress; it never...
fastjson
fastjson Fastjson は、Java オブジェクトを JSON 表現に変換するために使用できる Java ライブラリです。JSON 文字列を同等の Java オブジェクトに変換するためにも使用できます。Fastjson は、ソースコードを持たない既存のオブジェクトを含む、任意の Java オブジェクトで動作します。 FASTJSON 2.0.x がリリースされました。より高速で安全です。最新バージョンへのアップグレードをお勧めします。 Fastjson の目標 サーバーサイドおよび Android クライアントで最高のパフォーマンスを提供する Java オブジェクトを JSO...
nCentralDumpsterDiver
SolarWinds n-Central Dumpster Diver 描述 / 说明 已发布修复/规避方案，更多信息请参见：https://vulners.com/cve/CVE-2020-7984 此应用利用 nCentral 代理的 dot net 库来模拟代理注册，并拉取代理/设备配置设置。这些信息可能包含明文形式的 Active Directory 域凭据。该问题已于 2019 年 10 月 10 日报告给 SolarWinds PSIRT（[email protected]）。在大多数情况下，代理下载 URL 未受保护，任何未经授权的人只要知道客户 ID...
CVE-2026-XXXX-atlassian-email-enumeration
CVE-2026-XXXX：Atlassian Central GraphQL — 电子邮件枚举预言机 产品 Atlassian Central GraphQL 网关 （api.atlassian.com/graphql） 漏洞类型 CWE-204：可观测响应差异 — 电子邮件枚举预言机 严重等级 中危 — CVSS 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 描述 Atlassian 中央 GraphQL 网关上的 loomUnauthenticatedprimaryAuthTypeForEmail GraphQL 查询会根据电子邮件地址是否已在...
CVE-2022-23779
CVE-2022-23779 CVE-2022-23779は、Zoho ManageEngine Desktop Centralのセキュリティ脆弱性です。 これは情報漏洩の問題（CWE-200）に分類され、ソフトウェアが内部サーバー情報を許可されていないユーザーに漏洩します。 バージョン10.1.2137.8以前が影響を受けます ::中程度の深刻度 悪用の詳細と影響 概念実証コードは、HTTPリクエスト（例: /themes へのリクエスト）がリダイレクトのLocationヘッダーを介してホスト名を漏洩する方法を示しています。...
Rocky Linux 9 [CIQ] Security Update: python3.12 / python3.12-debug / python3.12-debuginfo / etc (crlsa-2025_23323)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523323 advisory. cpython: python: Python zipfile End of Central Directory EOCD Locator record offset not checked CVE-2025-8291 Tenable has extracted the preceding description block...
CVE-2026-86218
CVE-2026-86218 - N-able N-central 预认证 RCE 漏洞利用 概述 这是一个针对 CVE-2026-86218 的 Python 3 概念验证漏洞利用程序，该漏洞是 N-able N-central 中的一个严重预认证远程代码执行漏洞。 漏洞详情： CVE： CVE-2026-86218 CVSS 评分： 10.0（严重） CWE： CWE-96（静态代码注入） 受影响版本： N-central options 选项 选项| 描述 ---|--- -t, --target| 目标 N-central URL（例如 https://192.168.1.100...
CVE-2024-26026
CVE-2024-26026 BIG-IP Next Central Manager API の未認証SQLインジェクション リンク: https://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/...
PT-2026-103567
Name of the Vulnerable Software and Affected Versions Kiteworks Core affected versions not specified Description Kiteworks Core failed to apply gateway-level API security controls to all requests authenticated via the central authentication service. This allows an authenticated user to access RES...
CVE-2026-86218
CVE-2026-86218 CVE-2026-86218 - N-able N-central Struts BeanUtils 未认证 RCE | ---|--- CVE| CVE-2026-86218 CVSS| 10.0（严重） 受影响| N-central 本地部署 2026.3.1.14（包括 Hotfix 3） 已修复| 2026.3 Hotfix 4（build 2026.3.1.14） 披露日期| 2026-09-05 CWE| CWE-96（静态代码注入） 利用情况| 已在野利用（CISA KEV） Running version check ... Detected...
CVE-2026-12265
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...
EUVD-2026-88237
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...
CVE-2026-12265 Missing Authorization on HA Failover Config allows Complete Data Destruction
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...
CVE-2026-12265 Missing Authorization on HA Failover Config allows Complete Data Destruction
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...
CVE-2026-12265
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to an insufficient access control flaw in the HA failover endpoint . This vulnerability allows an attacker to perform destructive PostgreSQL database operations , potentially leading to complete data destruction. The vulnerabil...
CVE-2026-12264
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...
CVE-2026-12264 Authenticated File Write via HA Failover Config Upload leads to RCE
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...
CVE-2026-12264 Authenticated File Write via HA Failover Config Upload leads to RCE
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...
CVE-2026-12264
Zohocorp ManageEngine DDI Central versions prior to 6201 are vulnerable to an Arbitrary file write flaw. This vulnerability occurs during the HA Failover Config sync upload process, which can be leveraged by an authenticated user to achieve remote code execution (RCE) . No specific exploit detail...