1234 matches found
VMInjector
V M I n j e c t o r root@kitploit: c 2012 by Marco Batista Licensed under GPLv3 see LICENSE file Overview: VMInjector is a tool designed to bypass OS login authentication screens of major operating systems running on VMware Workstation/Player, by using direct memory manipulation. Description:...
SharpSphere
SharpSphere - 攻击vSphere基础设施 致谢 @jkcoote 和 @grzryc 完整的操作指南与示例请参见此处。 版本历史 1.0 - 初始发布 2.0 - 新增对使用SSPI的直通认证的支持。 2.1 - 新增对Linux目标虚拟机的支持（使用--linux），并添加了--verbose标志用于列出vCenter用户和组 简介 SharpSphere 为红队成员提供与 vCenter 管理的虚拟机客户操作系统的简便交互能力。它利用 vSphere Web Services API 并公开以下功能： 命令与控制 - 结合 F-Secure 的...
EUVD-2026-66762
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...
CVE-2026-58070
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...
CVE-2026-58070
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...
CVE-2026-58070
CVE-2026-58070 affects Veeam Backup & Replication 13.0.2.29 and all earlier 13.x builds (Windows-based and Veeam Software Appliance deployments; older 12.x versions are not affected). The root cause is that guest OS credentials used for Application Aware processing are written in cleartext to a s...
CVE-2026-58070
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...
PT-2026-82276
『A vulnerability that causes guest OS credentials used for Application Aware processing to be recorded in cleartext in logs on the guest machine.』 CVE-2026-58070 Severity: Medium KB4902: Vulnerability Resolved in Veeam Backup & Replication 13.1 https://t.co/FR1ctYoEZc...
Vulnerability Resolved in Veeam Backup & Replication 13.1
Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...
CVE-2026-74356
A flaw was found in the Linux kernel's vhost subsystem. An incorrect return value from the vhostgetavailidx function can cause the host to livelock. A malicious guest operating system OS can exploit this by not processing virtqueue entries, leading to the host repeatedly disabling notifications a...
Medium: spice-vdagent
Issue Overview: A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the guest operating system. This occurs because the filename provided by the SPICE host during file transfers is not proper...
SUSE SLES16 : Security update of open-vm-tools (SUSE-SU-2026:20100-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:20100-1 advisory. Update to open-vm-tools 13.0.5 based on build 24915695. boo1250692: Please refer to the Release Notes at...
OPENSUSE-SU-2026:20067-1 Security update of open-vm-tools
This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. boo1250692: Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular changes that have gone into the open-vm-tools...
SUSE-SU-2026:20114-1 Security update of open-vm-tools
This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. boo1250692: Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular changes that have gone into the open-vm-tools...
CVE-2022-31693
VMware Tools for Windows 12.x.y prior to 12.1.5, 11.x.y and 10.x.y contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest OS, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a...
EUVD-2016-7973
Malware in sbrugna...
EUVD-2015-2455
Malware in sbrugna...
EUVD-2019-8173
Malware in sbrugna...