CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR local on-prem anterior a la versión "4.4.0" es propenso a una vulnerabilidad de divulgación de información a través de las siguientes URL: root@kitploit: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes...

CVE-2020-12593

CVE-2020-12593 CVE-2020-12593 POC Symantec EDR on-prem en versiones anteriores a "4.5" es propenso a una vulnerabilidad de divulgación de información a través de la siguiente URL: root@kitploit: https://@IPEDR/atpapi/v2/policies/blacklist Referencia...

CVE-2019-19547

CVE-2019-19547 CVE-2019-19547 POC Symantec EDR 本地部署版（版本低于 "4.3.0"）存在无需认证的反射型 XSS 漏洞，可通过以下 URL 触发： root@kitploit: https://@IPEDR/r3epmpi/v1/dx/log 参考 https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-and-Response-XSS/SYMSA1502...

Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

conduit

Conduit 面向AI编码代理的本地控制平面。 按工程师计费 · 硬预算 · 出站治理 · 上下文膨胀可观测性 · 审计就绪导出 —— 全部位于您的VPC内。 Conduit 位于您的 AI 编码代理（Claude Code、Cursor、Codex、Aider）与您已使用的任何提供商（Anthropic、OpenAI、Bedrock、Azure —— 或您现有的 LiteLLM / Portkey 部署）之间。只需一个环境变量即可接入，客户端无需更改，提示和补全内容永不存储。 root@kitploit: Claude Code / Cursor / Codex │...

CVE-2025-53770

CVE-2025-53770 यह SharePoint की बिना प्रमाणीकरण वाली रिमोट कोड निष्पादन भेद्यता के लिए एक स्कैनर है, जिसे CVE-2025-53770 नंबर दिया गया है। इसका कोड वाइल्ड में देखे गए पेलोड को रिवर्स-इंजीनियर करके लिखा गया था। अपने जोखिम पर उपयोग करें, मैं इसके कारण होने वाले किसी भी नकारात्मक प्रभाव के लिए...

CVE-2025-53770

CVE-2025-53770 Questo è uno scanner per la vulnerabilità di esecuzione remota di codice non autenticata di SharePoint, con numero CVE CVE-2025-53770. Il codice è stato scritto tramite reverse engineering di un payload visto in natura. Usalo a tuo rischio, non sono responsabile per eventuali impat...

cve-2021-27065

Continuerò ad aggiungere nuovo codice o a modificare il codice esistente basandomi sulla ricerca di dati rubati Se sei stato compromesso, questi script non ti risolveranno il problema! Questi non ti forniscono alcun beneficio se non quello di sapere ora l'entità di ciò che è accaduto al tuo siste...

cve-2021-26084-confluence

Dies ist ein schneller und schmutziger poc, der für eine bestimmte Confluence-Instanz optimiert wurde, da keiner der vorhandenen handelsüblichen pocs funktioniert hat. Offensichtlich basiert es fast vollständig auf der Arbeit von https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md un...

Imperva Customers Protected Against Novel HTTP Desync Attacks

TL;DR: Recent Portswigger research introduced novel HTTP desync techniques discovered through an AI-assisted research system called the HTTP Terminator. The findings expand the range of unusual HTTP behaviors that can cause front-end and back-end systems to interpret the same traffic differently...

Security Bulletin: Sterling Order Management System Software, (On prem)

Summary Multiple vulnerabilities were addressed in Sterling Order Management System Software, On prem : 10.0.2607.0-Sterling-SSFF-All-Major-Update-Installer Vulnerability Details CVEID:CVE-2026-48978 DESCRIPTION: oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client...

CVE-2026-16812 VeloCloud Orchestrator OS Command Injection

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-8152

Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting XSS attack. When Unblu Spark is deployed with com.unblu.identifier.siteEmbeddedSetup=true, it runs in the same origin as the host application. Any JavaScript injected through this...

The Hidden Security Risk in Modern Networks: The Work Between Tools

Organizations have more visibility than ever. Growing tech stacks provide greater coverage, and network security teams are increasingly adopting AI and automation to help with routine tasks and reduce manual effort. But the same challenges persist. Outages still last hours, causing significant...

CVE-2026-34926

A directory traversal vulnerability in the Apex One on-premise server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploitable on the on-premise version of Apex...

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-42897 CVSS score: 8.1, has been described as a spoofing bug stemming from a cross-site scriptin...

CVE-2026-7163 Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure

A vulnerability in the assisted-service REST API, an optional Assisted Installer assisted-service component in the Multicluster Engine MCE, allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbitrary clusters provisioned through the hub...

PT-2026-32619

Name of the Vulnerable Software and Affected Versions Kiuwan Cloud affected versions not specified Kiuwan SAST on-premise KOP versions prior to 2.8.2509.4 Description Kiuwan SAST improperly authorizes SSO logins for mapped user accounts that have been locally disabled. This allows users whose...

Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem

Summary Multiple vulnerabilities were addressed in IBM watsonx Code Assistant On Prem V5.3.1 Patch 1 Vulnerability Details CVEID:CVE-2024-58340 DESCRIPTION: LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service ReDoS vulnerability in the MRKLOutputParser.pars...