Collect-MemoryDump

Collect-MemoryDump Collect-MemoryDump - DFIR के लिए विंडोज मेमोरी स्नैपशॉट का स्वचालित निर्माण Collect-MemoryDump.ps1 एक PowerShell स्क्रिप्ट है जिसका उपयोग लाइव विंडोज सिस्टम पेजफ़ाइल संग्रह सहित से फोरेंसिक रूप से सुदृढ़ तरीके से मेमोरी स्नैपशॉट एकत्र करने के लिए किया जाता है। विशेषताएं: ARM64...

ChanCMS <= 3.3.0 - Server-Side Request Forgery

yanyutao0402 ChanCMS 3.3.0 contains a server-side request forgery caused by manipulation of the "taskUrl" argument in /cms/collect/getArticle, letting remote attackers make arbitrary requests, exploit requires no special privileges. id: CVE-2025-10211 info: name: ChanCMS = 3.3.0 - Server-Side...

CVE-2026-22692

CVE-2026-22692: تجاوز خطير لحماية Twig Sandbox عبر collect-mapInto يتيح RCE/LFI/XXE October CMS نظرة عامة الحقل| التفاصيل ---|--- معرف CVE| CVE-2026-22692 الخطورة| متوسطة CVSS:3.1 4.9 الإعلان الأمني| GHSA-m5qg-jc75-4jp6 المنتج المتأثر| October CMS RCE, LFI, XXE اكتشفها| Lukasz Rybak تصنيف CWE...

CVE-2026-76279

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to write events to internal indexes outside the index access configured for the role. The vulnerability is...

CVE-2026-76273

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to add attacker-controlled content to system-level messages on the Splunk platform instance. The...

CVE-2026-76279 Improper Input Validation of Index Names through the collect Command in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to write events to internal indexes outside the index access configured for the role. The vulnerability is...

CVE-2026-76279

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to an improper input validation flaw in the collect Search Processing Language (SPL) command. The root cause is that the system fails to normalize whitespace in index names before enforcing role-based index-access...

EUVD-2026-94625

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to add attacker-controlled content to system-level messages on the Splunk platform instance. The...

CVE-2026-76273

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to improper input validation via the collect Search Processing Language (SPL) command. An attacker with the run_collect capability can exploit the fact that the command fails to validate the index name before proc...

CVE-2026-76273 Improper Input Validation through the collect Command in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to add attacker-controlled content to system-level messages on the Splunk platform instance. The...

PT-2026-107695

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15 Description An issue exists where a user with the run collect capabili...

PT-2026-107701

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15 Description Users with the run collect capability can use the collect...

PT-2026-106061

Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do anything and usually run with elevated permissions. To limit access to some dangerous artifact, Velociraptor allows for those to require high permissions like EXECVE to launch...

EUVD-2026-91071

On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...

CVE-2026-34493

On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...

CVE-2026-64892

Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63...

PT-2026-104031

Name of the Vulnerable Software and Affected Versions Johnson Controls Neo Series MVP2 versions prior to 3.3b63 Description A vulnerability in the On-Chip Debug Interface allows the collection of data from common resource locations. Recommendations Update Johnson Controls Neo Series MVP2 to versi...

PT-2026-104051

Name of the Vulnerable Software and Affected Versions Johnson Controls Easy IO Neo versions prior to 3.3b63 Description An exposure of sensitive information allows the collection of data from common resource locations. Attackers have been observed exploiting this issue in controllers to access...

CVE-2026-34494: On-Chip Debug and Test Interface With Improper Access Control

On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...

CVE-2026-64892: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63...