openwisp-controller

openwisp-controller .. image:: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml/badge.svg :target: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml :alt: CI build status .. image:: https://coveralls.io/repos/openwisp/openwisp-controller/badge.svg...

Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468

CVE-2024-38124 및 CVE-2024-43468에 대한 상세 분석 및 완화 전략 CVE-2024-38124 및 CVE-2024-43468에 대한 상세 분석 및 스크립트 완화 전략 CVE-2024-38124: Windows Netlogon 기술적 악용 맥락: 실제 시나리오에서, 네트워크에 접근 권한을 가진 공격자는 특수하게 조작된 Netlogon 메시지를 도메인 컨트롤러에 전송하여 CVE-2024-38124를 악용할 수 있습니다. 이를 통해 공격자는 네트워크상의 모든 머신도메인 컨트롤러 자체 포함을 가장할 수 있습니다...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

sccmhound

SCCMHound SCCMHound は、Microsoft Configuration Manager MCM 向けの C 製 BloodHound コレクターです。Configuration Manager のユーザーとコンピューターから BloodHound セッション情報を収集する方法をお探しなら、このツールが最適です。 別のコレクター SharpHound、SOAPHound など のデータと一緒に収集データをインポートすることを強くお勧めします。別のデータセットの前後どちらでインポートしても問題ありません。これにより、Configuration Manager...

CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503 인증되지 않은 SQL 인젝션 CVE-2025-59213 익스플로잇 이 스크립트는 CVE-2025-59213 취약점을 익스플로잇합니다. 이 취약점은 네트워크 접근이 가능한 인증되지 않은 공격자가 관리 지점Management Point에 접근하여, Discovery Data Manager DDM의 DuplicateAMTMachineRecord 메서드에서 SQL 인젝션 결함을 악용하여 사이트 데이터베이스에 임의의 SQL 쿼리를 실행할 수...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit 私が発見した、Microsoft Configuration Manager SCCM に対する CVE-2026-47301 として割り当てられた概念実証エクスプロイトチェーンです。アクセス制御の不備、CAB 展開パストラバーサルによる任意ファイル書き込み、証明書検証バイパス、および DLL ハイジャックを組み合わせて、SYSTEM レベルのコード実行を実現します。 使用方法 このエクスプロイトは、この CVE を悪用するために特別に細工された悪意のある cab を使用します。POC 用...

CVE-2026-12370

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

CVE-2026-15358

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

EUVD-2026-85237

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-15358 Path Traversal Vulnerability

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-15358 Path Traversal Vulnerability

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-15358

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions prior to 12.8.671 are susceptible to an unauthorized Path Traversal vulnerability. This flaw allows for unauthorized access to restricted file system paths. Specific exploitation details and links are not provided in the d...

CVE-2026-12370 Remote Code Execution Vulnerability

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

CVE-2026-12370

ZohoCorp ManageEngine OpManager , NetFlow Analyzer , and Network Configuration Manager (versions 12.8.667 and below) are vulnerable to a Server-Side Template Injection vulnerability. This flaw exists during Configlet processing and could lead to Remote Code Execution . While the impact is signifi...

CVE-2026-12370 Remote Code Execution Vulnerability

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

EUVD-2026-85228

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

PT-2026-97280

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions prior to 12.8.668 ManageEngine NetFlow Analyzer versions prior to 12.8.668 ManageEngine Network Configuration Manager versions prior to 12.8.668 Description Server-Side Template Injection SSTI occurs during...

CVE-2026-15358: Unquoted Search Path or Element

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-12370: Improper Neutralization of Special Elements Used in a Template Engine

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

PT-2026-97289

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions prior to 12.8.671 ManageEngine Network Configuration Manager versions prior to 12.8.671 Description An unauthorized Path Traversal issue exists, which allows an attacker to access files and directories outside t...