53 matches found
CVE-2022-21907
CVE-2022-21907 説明 1. このリポジトリは、CVE-2022-21907（CVSS:3.1 9.8 ）に脆弱なシステムを検出し、必要に応じてこの脆弱性から保護します。1行のPowerShellコードを2つ提供します。 2. 脆弱なIIS Webサーバーを攻撃するための、純粋なPython、PowerShell、Rubyスクリプトと、Metasploit、nmapモジュールを提供します（サーバーをクラッシュ（ブルースクリーン）させるDoS攻撃を実行します）。 検出と保護 スクリプト このスクリプトは、検出用のワンライナーコードを2つ、保護用のワンライナーコードを2つ実行しま...
CVE-2021-31166
CVE-2021-31166 作った理由 私は最近、CVE-2021-31166 のエクスプロイトを作成しました。これは CVE-2021-31166 と CVE-2021-31166 を利用します。ペネトレーションテスターは https://github.com/mauricelambert/CVE-2021-31166 を使うべきですが、SOC チームは適切に修正するために特定の脆弱性を把握する必要があるため、このエクスプロイトを作成しました。 説明 脆弱な IIS Web サーバーを攻撃するための、純粋な Python、PowerShell、Ruby...
CVE-2022-41040
CVE-2022-41040 Microsoft Exchange、サーバーサイドリクエストフォージェリに対して脆弱 ペイロード : /autodiscover/autodiscover.json?@URL/&Email=autodiscover/autodiscover.json%3f@URL /autodiscover/autodiscover.json?@%d.v1.COLLABHERE/&Email=autodiscover/autodiscover.json%3f@%d.v1.COLLABHERE...
CVE-2026-65939
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...
CVE-2026-65939
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...
CVE-2026-65939 WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...
EUVD-2026-57264
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...
CVE-2026-65939 WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...
CVE-2026-65939
CVE-2026-65939 affects WhatsUp Gold releases prior to 2026.0.2. The issue allows a privileged attacker to create a LogToFile action that specifies an arbitrary file extension within the IIS web root, enabling potential unauthorized file writes. CVSS:3.1 base score 6.8 (MEDIUM), with an adjacent a...
PT-2026-71120
Name of the Vulnerable Software and Affected Versions WhatsUp Gold versions prior to 2026.0.2 Description A privileged attacker can create a LogToFile action that allows the specification of an arbitrary file extension within the IIS web root. IIS Internet Information Services is a flexible,...
CVE-2026-65939: Unrestricted Upload of File with Dangerous Type
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...
CVE-1999-0412
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension...
EUVD-2009-1013
Malware in sbrugna...
EUVD-2024-36103
Malicious code in bioql PyPI...
CVE-2024-36459 Cross-Site Scripting Vulnerability in Symantec SiteMinder Web Agent
A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser...
CVE-2024-36459 Cross-Site Scripting Vulnerability in Symantec SiteMinder Web Agent
A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser...
CVE-2024-36459
CVE-2024-36459 is a CRLF cross-site scripting issue identified in SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. Affected components are the Web Agent implementations for IIS and Domino; the vulnerability allows an attacker to execute arbitrary Javascript ...
CVE-2024-36459: Improper Neutralization of CRLF Sequences
A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser...
PT-2024-27013 · Ca Technologies · Siteminder Web Agent For Domino Web Server +1
Name of the Vulnerable Software and Affected Versions: SiteMinder Web Agent for IIS Web Server affected versions not specified SiteMinder Web Agent for Domino Web Server affected versions not specified Description: A CRLF cross-site scripting issue has been identified in certain configurations of...
