Lucene search
+L

39 matches found

Kitploit
Kitploit
•added 2026/10/27 3:02 p.m.•28 views

CVE-2021-34473-Exchange-ProxyShell

python sendwebshellmail.py https://mail16.echod.com [email protected] Single retrieval python sendwebshellmail.py https://mail16.echod.com crack Batch read emails from mail.txt and attempt to obtain SID tokens python sendwebshellmail.py https://mail16.echod.com [email protected] send on...

10CVSS8.8AI score0.99999EPSS
SaveExploits18
NVD
NVD
•added 2026/10/16 6:17 p.m.•6 views

CVE-2026-111638

sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys...

8.3CVSS0.00397EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/16 5:39 p.m.•3 views

CVE-2026-111638 sshportal through 1.19.5 Missing Authorization in 'key show' Command Exposes Private Keys

sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys...

8.3CVSS6AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/16 5:39 p.m.•25 views

CVE-2026-111638 sshportal through 1.19.5 Missing Authorization in 'key show' Command Exposes Private Keys

sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys...

8.3CVSS0.00397EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/16 5:39 p.m.•15 views

CVE-2026-111638

The sshportal software (versions through 1.19.5 ) is vulnerable to a missing authorization flaw in the management shell's key show command. This vulnerability allows authenticated non-admin users to retrieve decrypted backend private SSH keys by requesting predictable names such as default or hos...

8.3CVSS6AI score0.00397EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/16 5:39 p.m.•7 views

EUVD-2026-103060

sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys...

8.3CVSS6AI score0.00397EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/16 12:00 a.m.•6 views

CVE-2026-111638: Missing Authorization

sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys...

8.3CVSS6AI score0.00397EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•7 views

PT-2026-116037

sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys...

8.3CVSS6AI score0.00397EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/18 12:17 p.m.•16 views

CVE-2026-28199

An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential...

4.8CVSS0.00099EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/18 12:17 p.m.•18 views

CVE-2026-28197

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted...

9.4CVSS0.00666EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/18 11:19 a.m.•19 views

EUVD-2026-82877

An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential...

4.8CVSS6AI score0.00099EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/18 11:12 a.m.•21 views

EUVD-2026-82875

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS6AI score0.0034EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/18 11:12 a.m.•47 views

CVE-2026-28198 Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS0.0034EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 11:07 a.m.•52 views

CVE-2026-28197

CVE-2026-28197 is a privilege escalation vulnerability in NetBackup Flex OS (Cohesity), where an authenticated, low-privileged user with access to the management shell can supply a specially crafted input to a privileged administrative command, achieving arbitrary code execution with root-level p...

9.4CVSS6.7AI score0.00666EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/18 11:07 a.m.•46 views

CVE-2026-28197 Privilege Escalation via Argument Injection in NetBackup Flex OS Shell

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted...

9.4CVSS0.00666EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/18 11:07 a.m.•18 views

CVE-2026-28197 Privilege Escalation via Argument Injection in NetBackup Flex OS Shell

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted...

9.4CVSS6.7AI score0.00666EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/18 11:07 a.m.•24 views

EUVD-2026-82874

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted...

9.4CVSS6.7AI score0.00666EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•10 views

PT-2026-95352

Name of the Vulnerable Software and Affected Versions NetBackup Flex OS affected versions not specified Description An authenticated, low-privileged user with access to the management shell can bypass the cryptographic signature verification process of a privileged support command by providing a...

9.4CVSS5.9AI score0.0034EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•11 views

PT-2026-95353

Name of the Vulnerable Software and Affected Versions NetBackup Flex OS affected versions not specified Description An authenticated user with access to the management shell can read arbitrary files from the underlying operating system. This is achieved by providing a specially crafted path...

4.8CVSS6AI score0.00099EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•8 views

PT-2026-95351

Name of the Vulnerable Software and Affected Versions NetBackup Flex OS affected versions not specified Description An authenticated, low-privileged user with access to the management shell can provide specially crafted input to a privileged administrative command. This leads to arbitrary code...

9.4CVSS6.5AI score0.00666EPSS
SaveExploits0References5
Rows per page
Query Builder