CVE-2024-11467

CVE-2024-11467 macOS 操作系统使用 XPC 服务实现各种进程之间的基本进程间通信，例如 XPC Service 守护进程与第三方应用程序的特权辅助工具之间的通信。VMware Horizon Client 在安装时会在 /Library/PrivilegedHelperTools/ 目录下注册 com.vmware.horizon.CDSHelper 特权辅助工具。 还应注意，特权辅助工具使用 mach 名称 com.vmware.horizon.CDSHelper 来监听传入的 XPC 连接，如上所示。 随后使用默认的 macOS...

log-horizon

Microsoft Sentinel SIEM 日志源分析器 我回答过无数次 “我们到底从这些日志中得到了什么？” 或 “Microsoft Sentinel 的推荐日志是什么？” 这样的问题。答案总是取决于很多因素，但我们可以给出通用的建议。所以我就在这里构建了这个工具。 Log Horizon 连接到你的 Microsoft Sentinel 工作区（可选地连接到 Defender XDR），遍历你正在引入的每个日志表，并告诉你是否能从中获得安全价值，还是只是在烧钱。它对表进行分类，根据你的检测规则对其进行评分，并给出带有节省估算的具体建议。 重要提示...

nextdns

NextDNS CLI Client NextDNS CLI es una herramienta de línea de comandos que te permite usar el servicio DNS-over-HTTPS DoH de NextDNS con capacidades avanzadas. Aunque las funciones más avanzadas solo funcionarán con NextDNS, este programa puede funcionar como cliente para cualquier proveedor de D...

CVE-2022-22954

多个漏洞触发点检测，多线程批量检测，命令执行，文件写入 root@kitploit: // 单个目标漏洞检测 python CVE-2022-22954.py -u https://x.x.x.x // 命令执行 python CVE-2022-22954.py -u https://x.x.x.x -c "id" // 写文件 python CVE-2022-22954.py -u https://x.x.x.x -fn test.jsp -fc "test" // 上传文件，windows 设置文件名需要指定路径 python CVE-2022-22954.py -u...

CVE-2022-34302

🕷️ CVE-2022-34302 - Nueva vulnerabilidad del cargador de arranque de New Horizon Datasys New Horizon Datasys Reboot Restore Boot Loader - Bring Your Own Vulnerable UEFI Application BYOVUA - Omisión de Secure Boot mediante un cargador de arranque firmado con un cargador PE/COFF personalizado...

Log4j-Vulnerability

Log4j 漏洞 教程：https://youtu.be/PNDBjoT83zA 教程：https://cryptodeeptech.ru/log4j-vulnerability Log4j 背景 阿里巴巴云安全团队公开披露了一个严重漏洞 CVE-2021-44228，该漏洞可在多个版本的 Apache Log4j2 Log4Shell 上实现未经身份验证的远程代码执行。攻击者可通过任何协议（如 HTTPS）连接易受攻击的服务器，并发送特制字符串进行利用。 Log4j 加密货币挖矿攻击活动 Darktrace 在多个客户部署环境中检测到因利用此 Log4j...

CVE-2019-5513-scanner

VMware Horizon /broker/xml 漏洞扫描器 一个高性能多线程扫描器，用于检测 VMware Horizon Connection Server 的 /broker/xml 端点中无需身份验证即可触发的信息泄露漏洞。 📋 概述 VMware Horizon Connection Server 暴露了一个 XML API 端点（/broker/xml），该端点无需身份验证即可泄露敏感的内部配置信息。此扫描器通过测试两种攻击向量 来快速识别存在漏洞的服务器： 1. 空 POST 请求体（零日发现） — 发送一个完全空的 POST 请求。服务器无需任何 XML...

CVE-2026-89089

A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user ROLEUSER can run the shipped, default-enabled online reports "Maintenance contracts expired" AssetManagementMaintExpired and...

EUVD-2026-75729

A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user ROLEUSER can run the shipped, default-enabled online reports "Maintenance contracts expired" AssetManagementMaintExpired and...

EUVD-2026-75725

An XML External Entity XXE vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Horizon. When OpenNMS collects XML from a source whose response is attacker-controlled for example a compromised monitored host or an HTTP man-in-the-middle position, the collector's...

CVE-2026-19596

An XML External Entity (XXE) vulnerability in the XML collector of OpenNMS Meridian and Horizon allows an attacker who can control the XML response collected by OpenNMS (e.g., via a compromised monitored host or HTTP man-in-the-middle) to read files accessible to the OpenNMS service account, incl...

CVE-2026-19596 OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host

An XML External Entity XXE vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Horizon. When OpenNMS collects XML from a source whose response is attacker-controlled for example a compromised monitored host or an HTTP man-in-the-middle position, the collector's...

EUVD-2026-75707

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...

CVE-2026-89054 OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...

CVE-2026-89054

CVE-2026-89054 is a missing authorization vulnerability in OpenNMS Horizon . The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH , leaving the shipped @PATCH endpoints for event configuration and SNMP data collection accessible withou...

Log4jHorizon

Log4jHorizon Explotando CVE-2021-44228 en VMWare Horizon para ejecución remota de código y más. Crossing the Log4j Horizon - A Vulnerability With No Return El código y el README.md esta vez están un poco dispersos. ¡Próximamente habrá actualizaciones! ¿Por qué? Las pruebas de concepto para esta...

CVE-2021-44228

CVE-2021-44228 Backdoor detection for VMware view horizon This includes a canary with an optional submit. Clearly use at own risk blah blah This is designed to be run on Windows VMware Horizon connection servers. It doens't look at the UAG appliances they are Photon linux...

PT-2026-89576

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...

CVE-2026-77654

Improper Privilege Management vulnerability in Horizon Security Analyzer formerly AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that ...

CVE-2026-77654

Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux 64-bit contains an Improper Privilege Management flaw affecting versions A33.10, A33.20, and A33.30 . The root cause is a misconfigured entry in the sudoers file : a local user with command-line access can escalate privileges...