Lucene search
+L

29 matches found

Kitploit
Kitploit
•added 2026/10/05 11:40 p.m.•18 views

CVE-2021-34473-Exchange-ProxyShell

python sendwebshellmail.py https://mail16.echod.com [email protected] obtener uno solo python sendwebshellmail.py https://mail16.echod.com crack leer en lote los correos de mail.txt e intentar obtener el token SID python sendwebshellmail.py https://mail16.echod.com [email protected] sen...

10CVSS8.1AI score0.99999EPSS
SaveExploits16
NVD
NVD
•added 2026/09/18 12:17 p.m.•11 views

CVE-2026-28199

An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential...

4.8CVSS0.00099EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/18 12:17 p.m.•13 views

CVE-2026-28197

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted...

9.4CVSS0.00666EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/18 11:19 a.m.•13 views

EUVD-2026-82877

An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential...

4.8CVSS6AI score0.00099EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/18 11:12 a.m.•14 views

EUVD-2026-82875

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS6AI score0.0034EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/18 11:12 a.m.•40 views

CVE-2026-28198 Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS0.0034EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/18 11:07 a.m.•39 views

CVE-2026-28197 Privilege Escalation via Argument Injection in NetBackup Flex OS Shell

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted...

9.4CVSS0.00666EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/18 11:07 a.m.•16 views

EUVD-2026-82874

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted...

9.4CVSS6.7AI score0.00666EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/18 11:07 a.m.•12 views

CVE-2026-28197 Privilege Escalation via Argument Injection in NetBackup Flex OS Shell

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted...

9.4CVSS6.7AI score0.00666EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 11:07 a.m.•36 views

CVE-2026-28197

CVE-2026-28197 is a privilege escalation vulnerability in NetBackup Flex OS (Cohesity), where an authenticated, low-privileged user with access to the management shell can supply a specially crafted input to a privileged administrative command, achieving arbitrary code execution with root-level p...

9.4CVSS6.7AI score0.00666EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•7 views

CVE-2026-28197: Improper Neutralization of Argument Delimiters in a Command

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted...

9.4CVSS6.7AI score0.00666EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•5 views

CVE-2026-28198: Improper Verification of Cryptographic Signature

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS6AI score0.0034EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/05/21 12:00 a.m.•15 views

F5 Networks BIG-IP : iControl REST and tmsh vulnerability (K000161022)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.2 / 17.5.1.6 / 21.0.0.2. It is, therefore, affected by a vulnerability as referenced in the K000161022 advisory. Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell tmsh network...

7.1CVSS6AI score0.00278EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/13 6:30 p.m.•24 views

EUVD-2026-29992

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell tmsh network diagnostics commands and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view the network status of destination systems. Note: Software versions which have...

7.1CVSS5.8AI score0.00278EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/13 6:30 p.m.•18 views

EUVD-2026-29975

Incorrect permission assignment vulnerabilities exist in iControl REST and TMOS shell tmsh undisclosed command which may allow an authenticated attacker to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.1CVSS5.8AI score0.0034EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/13 2:12 p.m.•11 views

CVE-2026-42408 BIG-IP DNS tmsh vulnerability

When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell tmsh command that may allow a highly privileged authenticated attacker to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

6.7CVSS5.8AI score0.00109EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/15 1:55 p.m.•20 views

CVE-2025-61958 BIG-IP TMSH vulnerability

A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell. For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a...

8.7CVSS0.00393EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-10275

Malware in sbrugna...

9.9CVSS8.2AI score0.01769EPSS
SaveExploits1References2
Microsoft KB
Microsoft KB
•added 2025/08/12 7:00 a.m.•30 views

Description of the security update for SharePoint Server 2019 Language Pack: August 12, 2025 (KB5002770)

None None...

8.4CVSS6.8AI score0.00546EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/08/02 12:00 a.m.•16 views

PT-2023-24981 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions affected versions not specified Description: The issue concerns F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards, which generate a deterministic password for the Crypto User account. This predictable password allows an...

6.1CVSS6.1AI score0.00176EPSS
SaveExploits0References3
Rows per page
Query Builder