WSO2-2021-1258

WSO2-2021-1258: Zip Slip vulnerability in WSO2 ESB A ZIP file based directory traversal Zip Slip vulnerability was identified in the WSO2 Management Console. Remote code execution may be obtained by writing/overwriting specific files. Vendor Disclosure: The vendor's disclosure and fix for this...

CVE-2023-31703

CVE-2023-31703 — Reflected XSS in eScan Management Console Overview CVE ID: CVE-2023-31703 Vulnerability Type: Reflected Cross-Site Scripting XSS Affected Product: Microworld Technologies eScan Management Console Affected Version: 14.0.1400.2281 Severity: Medium Discovered By: Sahil Ojha Disclosu...

CVE-2026-83229

CVE-2026-83229 affects the Siebel Management Console component of Oracle Siebel CRM's Siebel CRM Deployment product, versions 17.0 through 26.7 . A high-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve takeover ...

EUVD-2026-79582

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Siebel Management Console. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment...

EUVD-2026-79581

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Siebel Management Console. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Whil...

CVE-2026-83230

This vulnerability affects Oracle Siebel CRM (component: Siebel Management Console ) in supported versions 17.0 through 26.7 . An easily exploitable, low-privileged attacker with network access via HTTP can compromise the Siebel CRM Deployment component. Successful exploitation results in unautho...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console AMC of SonicWall Secure Mobile Access SMA 1000 series appliances. The vulnerability stems from insufficient authorization in the AMC, allowing authenticated remote attackers to escalate...

CVE-2024-42919

eScan Management Console Exploit Title : eScan Management Console - Incorrect Access Control Author : Jeyabalaji Affected Versions : 14.0.1400.2281 Tested on : Windows 11 CVE : CVE-2024-42919 Description: The Escan Management Console implements authentication mechanisms; however, the...

MSC-EvilTwin-Local-Privilege-Escalation

CVE-2025-26633 - Microsoft Management Console .msc EvilTwin Local Privilege Escalation PoC Zero-day at time of disclosure March 2025 – Actively exploited in the wild by Water Gamayun APT ONLY FOR AUTHORIZED SECURITY TESTING AND RESEARCH Vulnerability Details Exploit Title : Microsoft Management...

CVE-2021-40904

CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded application Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Attack type: RCE Solution: Upgrade to version 1.6 or higher. Summary: The web management console of CheckMk Raw Edition versions 1.5.0 to 1.5.0p25...

CVE-2024-0507_CVE-2024-0200-github

Introducción Este repositorio contiene exploits que hemos desarrollado para las vulnerabilidades de GitHub Enterprise CVE-2024-0507 y CVE-2024-0200. Consulta el artículo completo en https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/...

CVE-2022-29548

Prueba de concepto de exploit para CVE-2022-29548: Existe un problema de XSS reflejado en la Consola de Administración de varios productos WSO2. Esto afecta a API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0 y 4.0.0; API Manager Analytics 2.2.0, 2.5.0 y 2.6.0; API Microgateway 2.2.0; Data...

CVE-2021-40905

CVE-2021-40905 - RCE via a crafted .mkp file Application: CheckMK Management Web Console Software Revision: Less than or equal to 2.0.0p17 Attack type: RCE Solution: TBD or the MKPs shared on https://exchange.checkmk.com/ are manually reviewed by CheckMk and they look for malicious code or...

CVE-2025-26633

CVE-2025-26633 - PoC de MSC EvilTwin Prueba de Concepto PoC para la vulnerabilidad CVE-2025-26633 que explota la Consola de Administración de Microsoft MMC Acerca de Este PoC simula la vulnerabilidad CVE-2025-26633, descubierta por Trend Micro, que explota la carga de archivos .msc maliciosos par...

CVE-2023-33732

CVE-2023-33732 — Reflected Cross-Site Scripting in eScan Management Console -orange Overview CVE-2023-33732 is a Reflected Cross-Site Scripting XSS vulnerability discovered in the Microworld Technologies eScan Management Console , version 14.0.1400.2281. The flaw exists in the New Policy assignme...

CVE-2023-34835

CVE-2023-34835 — eScan Management Console: Reflected Cross-Site Scripting XSS Table of Contents Overview Vulnerability Details Affected Product Technical Analysis Proof of Concept Steps to Reproduce Impact Mitigation & Remediation References Disclaimer Overview A Reflected Cross-Site Scripting XS...

CVE-2023-33731

CVE-2023-33731 — eScan Management Console: Reflected Cross-Site Scripting XSS -orange Table of Contents Overview Vulnerability Details Severity & CVSS Score Affected Product Technical Analysis Proof of Concept Impact Mitigation & Remediation Disclosure Timeline...

CVE-2023-33730

CVE-2023-33730 — eScan Management Console Privilege Escalation Severity: Critical CVE ID: CVE-2023-33730 Disclosed: 30 May 2023 Author: Sahil Ojha Table of Contents Overview Vulnerability Details Impact Technical Analysis Proof of Concept Remediation References Disclaimer Overview eScan Managemen...

CVE-2023-34837

CVE-2023-34837 — eScan Management Console: Reflected Cross-Site Scripting XSS Overview CVE-2023-34837 is a Reflected Cross-Site Scripting XSS vulnerability discovered in the Microworld Technologies eScan Management Console version 14.0.1400.2281. The vulnerability exists in the GrpPath POST...

CVE-2023-34836

CVE-2023-34836 — eScan Management Console 14.0.1400.2281: Reflected Cross-Site Scripting XSS Overview CVE ID: CVE-2023-34836 Vulnerability Type: Reflected Cross-Site Scripting XSS Affected Product: Microworld Technologies eScan Management Console Affected Version: 14.0.1400.2281 Severity: Medium...