CVE-2026-102257

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2026-102258

Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...

CVE-2021-40904

CVE-2021-40904 - RCE a través de la aplicación integrada Dokuwiki de CheckMk Aplicación: Consola web de gestión de CheckMK Revisión del software: De 1.5.0 a 1.5.0p25 Tipo de ataque: RCE Solución: Actualice a la versión 1.6 o superior. Resumen: La consola web de gestión de CheckMk Raw Edition...

CVE-2026-102258

Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...

CVE-2026-102258

Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...

CVE-2026-102258

A post-authentication Stored Cross-Site Scripting (XSS) vulnerability exists in the SonicWall SMA1000 appliance's Management Console (AMC) . Under specific conditions, a remote authenticated attacker with administrator privileges can store and execute arbitrary JavaScript code within the AMC. Thi...

EUVD-2026-94327

Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...

CVE-2026-102257

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2026-102257

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2026-102257

The SonicWall SMA1000 appliance is affected by a Zip Slip vulnerability (CWE-22) within the Appliance Management Console (AMC) interface. A post-authentication attacker can use a specially crafted archive to extract files outside the intended destination directory, leading to remote code executio...

EUVD-2026-94326

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2022-29548

CVE-2022-29548 的概念验证漏洞利用代码：多个 WSO2 产品的管理控制台存在反射型 XSS 问题。受影响的版本包括 API Manager 2.2.0、2.5.0、2.6.0、3.0.0、3.1.0、3.2.0 和 4.0.0；API Manager Analytics 2.2.0、2.5.0 和 2.6.0；API Microgateway 2.2.0；Data Analytics Server 3.2.0；Enterprise Integrator 6.2.0、6.3.0、6.4.0、6.5.0 和 6.6.0；IS as Key Manager...

CVE-2024-0507_CVE-2024-0200-github

Introducción Este repositorio contiene exploits que hemos desarrollado para las vulnerabilidades de GitHub Enterprise CVE-2024-0507 y CVE-2024-0200. Consulta el artículo completo en https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/...

CVE-2024-42919

Consola de gestión eScan Título del Exploit : Consola de gestión eScan - Control de Acceso Incorrecto Autor : Jeyabalaji Versiones afectadas : 14.0.1400.2281 Probado en : Windows 11 CVE : CVE-2024-42919 Descripción: La consola de gestión Escan implementa mecanismos de autenticación; sin embargo, ...

WSO2-2021-1258

WSO2-2021-1258: Vulnerabilidad Zip Slip en WSO2 ESB Se identificó una vulnerabilidad de recorrido de directorios basada en archivos ZIP Zip Slip en la consola de administración de WSO2. Se puede obtener ejecución remota de código escribiendo/sobrescribiendo archivos específicos. Divulgación del...

MSC-EvilTwin-Local-Privilege-Escalation

CVE-2025-26633 - Consola de administración de Microsoft .msc EvilTwin PoC de escalada de privilegios local Día cero en el momento de la divulgación marzo de 2025 – Explotado activamente en la naturaleza por Water Gamayun APT SOLO PARA PRUEBAS DE SEGURIDAD E INVESTIGACIÓN AUTORIZADAS Detalles de l...

CVE-2023-31703

CVE-2023-31703 — eScan Management Console 中的反射型 XSS 漏洞 概述 CVE ID： CVE-2023-31703 漏洞类型： 反射型跨站脚本（XSS） 受影响产品： Microworld Technologies eScan Management Console 受影响版本： 14.0.1400.2281 严重性： 中等 发现者： Sahil Ojha 披露日期： 2023 年 5 月 16 日 描述 Microworld Technologies eScan Management Console（版本 14.0.1400.2281）的...

CVE-2021-40905

CVE-2021-40905 - RCE mediante un archivo .mkp manipulado Aplicación: Consola web de gestión de CheckMK Revisión de software: Menor o igual a 2.0.0p17 Tipo de ataque: RCE Solución: Por determinar, o los MKP compartidos en https://exchange.checkmk.com/ son revisados manualmente por CheckMk, que...

CVE-2025-26633

CVE-2025-26633 - PoC de MSC EvilTwin Prueba de Concepto PoC para la vulnerabilidad CVE-2025-26633 que explota la Consola de Administración de Microsoft MMC Acerca de Este PoC simula la vulnerabilidad CVE-2025-26633, descubierta por Trend Micro, que explota la carga de archivos .msc maliciosos par...

CVE-2023-33732

CVE-2023-33732 — eScan管理控制台中的反射型跨站脚本 -orange 概述 CVE-2023-33732 是 MicroWorld Technologies eScan管理控制台 版本 14.0.1400.2281 中发现的一个反射型跨站脚本（XSS）漏洞。该缺陷存在于 新建策略 分配表单（AssignPolicyTemplate 端点）中，允许远程未认证攻击者向任何已认证用户（通过诱导点击精心构造的URL）的浏览器中注入并执行任意JavaScript。...