dameflare

DameFlare SolarWinds Dameware MRC의 스마트 카드 인증 우회를 통한 비인증 RCE CVE-2019-3980 | CVSS 9.8 Critical | TCP/6129 원본 연구 및 PoC: Tenable, Inc. TRA-2019-43 Python 3 도구: David Boyd @Fir3d0g 작동 방식 Dameware MRC는 TCP/6129 포트에서 원격 제어 서비스DWRCS.exe를 노출합니다. 스마트 카드 인증 핸드셰이크 중 서버는 공격자가 제어하는 파일을 스마트 카드 드라이버 설치...

CVE-2019-3980

CVE-2019-3980 이 저장소는 사용자 지정 C 실행 파일과 함께 Nessus POC를 활용하여 원격 호스트에서 명령을 실행하고 해당 명령의 출력을 가져오기 위해 만들어졌습니다. python 파일은 웹 서버를 시작하고, 익스플로잇을 실행한 다음, 웹 서버를 통해 결과를 가져오는 데 사용됩니다. C exe는 익스플로잇을 통해 대상에 업로드됩니다. 대상에서 실행되면 exe는 지정된 IP/포트로 콜백하여 실행할 명령을 가져옵니다경로는 /cmd. 명령이 완료되면 exe는 출력을 동일한 웹 서버로 보냅니다. 출력 전송은 404를...

CVE-2019-3980

CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ openssl dependency. Port of https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instructions This PoC requires staticly linked openssl libraries. Place openssl includes in thirdparty\include\openssl and libs ...

Exploit for Origin Validation Error in Solarwinds Dameware_Mini_Remote_Control

DameFlare !Pythonh...

CVE-2021-31217

In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM...

EUVD-2005-1169

Malware in sbrugna...

EUVD-2013-3186

Malware in sbrugna...

EUVD-2005-1091

Malware in sbrugna...

EUVD-2021-18130

Malware in sbrugna...

EUVD-2018-4850

Malware in sbrugna...

EUVD-2019-13564

Malware in sbrugna...

EUVD-2025-16661

Malicious code in bioql PyPI...

The vulnerability of the SolarWinds DameWare Mini Remote Control software lies in its insecure management of privileges, allowing a malicious individual to escalate their privileges.

The vulnerability of the SolarWinds DameWare Mini Remote Control software-related remote access control tool is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

SolarWinds DameWare Mini Remote Control <= 12.3.1.20 Local Privilege Escalation

The version of SolarWinds DameWare Mini Remote Control running on the remote host is 12.3.1.20 or prior. It is, therefore, affected by a privilege escalation vulnerability. The SolarWinds DameWare Mini Remote Control was determined to be affected by an incorrect permissions local privilege...

CVE-2025-26396

The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability...

CVE-2025-26396 SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability

The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability...

CVE-2025-26396

SolarWinds DameWare Mini Remote Control is affected by an Incorrect Permissions Local Privilege Escalation vulnerability. The issue stems from improper permissions on a product component (installer/service) that allows a local attacker with a low-privilege account to escalate privileges, potentia...

CVE-2025-26396 SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability

The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability...

SolarWinds DameWare Mini Remote Control 安全漏洞

SolarWinds DameWare Mini Remote Control is a remote control software and desktop sharing tool from SolarWinds USA. A security vulnerability exists in SolarWinds DameWare Mini Remote Control that stems from improper privileges and could result in local elevation of privileges...

SolarWinds DameWare Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds DameWare Mini Remote Control Service. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...