Vmware_vCenter

VMware vCenter 低版本存在未授权任意文件读取漏洞 Arbitrary File Read vulnerability in VMware vCenterUnauthenticated Poc from: https://twitter.com/ptswarm/status/1316016337550938122 e.g. https://www.jas502n.com/eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties...

cve-2021-21980-mock-server

Clippy of the Dead - CVE-2021-21980 testing environment and Nuclei template This repository contains a high-confidence Nuclei template to detect CVE-2021-21980 vSphere Web Client path traversal and a small mock environment that reproduces the vulnerable behavior for safe local testing. Files:...

Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. id: CVE-2022-38840 info: name: Güralp MAN-EAM-0003 3.2.4 - XML External Entity XXE author: daffainfo severity: high description: |...

Güralp MAN-EAM XXE LFI (CVE-2022-38840)

Exploits CVE-2022-38840 in Güralp MAN-EAM-0003 3.2.4: XXE via xmldata in POST /cgi-bin/xmlstatus.cgi reads local files such as /etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Güralp MAN-EAM-0003 xmlstatus XXE LFI CVE-2022-38840.""" import re from kittysploit import from...

CVE-2026-82356

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

EUVD-2026-85537

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

CVE-2026-82356

Imprivata Enterprise Access Management (EAM) versions 26.2.6 and below lack a supported mechanism to rotate the RSA key pair used to generate the appliance's X.509 certificate . Because the key pair remains static indefinitely, a compromise of the private key—via backup exfiltration, hypervisor s...

CVE-2026-82356 Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

CVE-2026-82356 Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

PT-2026-97505

Name of the Vulnerable Software and Affected Versions Imprivata EAM versions prior to 26.2.7 Description The software lacks a mechanism to rotate the RSA key pair used for generating X.509 certificates after deployment. This means the key pair remains permanent once the system is deployed, which...

CVE-2026-82356: Inadequate Encryption Strength

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

PT-2026-77515

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Asset Management versions 12.2.3 through 12.2.15 Description A flaw in the Linear Asset Management component allows a low privileged attacker with network access via HTTP to compromise the system. The exploitation requires...

Oracle Enterprise Asset Management Internal Operations Full Control

The vulnerability of the Internal Operations component of the Oracle Enterprise Asset Management application, a part of the Oracle E-Business Suite automation system for enterprise activities, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker...

Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE) Detection

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """cgi-bin/xmlstatus.""" import re from kittysploit import from lib.protocols.http.httpclient...

CVE-2022-38840

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure...

EUVD-2017-16924

Malware in sbrugna...

EUVD-2017-16923

Malware in sbrugna...

EUVD-2025-31116

Malicious code in bioql PyPI...

CVE-2025-10541

iMonitor EAM 9.6394 installs a system service eamusbsrv64.exe that runs with NT AUTHORITY\SYSTEM privileges. This service includes an insecure update mechanism that automatically loads files placed in the C:\sysupdate\ directory during startup. Because any local user can create and write to this...

CVE-2025-10541

iMonitor EAM 9.6394 installs a system service eamusbsrv64.exe that runs with NT AUTHORITY\SYSTEM privileges. This service includes an insecure update mechanism that automatically loads files placed in the C:\sysupdate\ directory during startup. Because any local user can create and write to this...