Lucene search
+L

847 matches found

Kitploit
Kitploit
added 2026/08/28 6:17 p.m.1 views

ExchangeRelayX

ExchangeRelayX バージョン1.0.0。このツールは、攻撃者がSMBまたはHTTPベースのNTLMリレー攻撃を実行し、オンプレミスのMicrosoft ExchangeサーバーのEWSエンドポイントに対して攻撃を行い、被害者のメールボックスを侵害する能力を示すPoCです。このツールは、被害者のメールボックスと連絡先にアクセスできるOWAのようなインターフェースを攻撃者に提供します。 背景 Defcon26でリリースされました。ツールの背景、悪用される中核的な問題、および録画されたデモはこちらをご覧ください:...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 11:13 a.m.3 views

CVE-2021-34473-scanner

CVE-2021-34473-scanner Scanner per CVE-2021-34473, ProxyShell, una vulnerabilità di Microsoft Exchange On-premise Per testare le macchine una per una, usa scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr Per testare più macchine contemporaneamente, usa mass-scanner e aggiung...

10CVSS8.7AI score0.99999EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/28 7:45 a.m.3 views

FACT

Strumento di Raccolta di Artefatti Forensi Panoramica FACT è uno strumento per raccogliere, elaborare e visualizzare dati forensi da cluster di macchine in esecuzione nel cloud o on-premise. Distribuzione Per una distribuzione di base a nodo singolo, consigliamo di utilizzare Docker e Docker...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/28 7:03 a.m.2 views

vaultize_CVE-2024-36079

Informazioni sulla vulnerabilità La soluzione on-premise Vaultize DRM v.21.07.27 è vulnerabile al caricamento di file arbitrari. I file i cui nomi contengono parte del percorso assoluto del file system possono essere caricati a causa della mancanza di filtraggio dei nomi dei file. Quando si tenta...

6.5CVSS5.9AI score0.00589EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.56 views

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

10CVSS8.7AI score0.85735EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/08/26 9:02 p.m.3 views

CVE-2023-3897

CVE-2023-3897 Eine Benutzernamen-Enumeration ist durch Umgehung des CAPTCHA in der On-Premise SureMDM-Lösung auf Windows-Bereitstellung möglich. Der Angreifer kann lokale Benutzerinformationen über Fehlermeldungen enumerieren. Dieses Problem betrifft SureMDM On-Premise: Version 6.31 und niedriger...

5.3CVSS5.5AI score0.03064EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.5 views

TeamPass

TeamPass 3 TeamPass ist eine kollaborative Passwortverwaltungslösung, die vor Ort installiert wird. Copyright © 2009-2026, Nils Laumaillé Anforderungen Über PHP-Versionen Installation Traditionelle Installation Empfohlen Docker Dokumentation Sprachen Lizenzvereinbarung Webseite Fehler Anforderung...

5.5AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/24 4:13 a.m.2 views

itsm-exploit

Exploits für Ivanti Neurons for ITSM On Premise Dieses Skript nutzt mehrere Schwachstellen aus, die es einem nicht authentifizierten Angreifer ermöglichen, Administratorzugriff zu erlangen und entfernte Befehle auf Ivanti Neurons for ITSM On Premise auszuführen CVE-2023-46808. Technische Details...

9.9CVSS8.9AI score0.02001EPSS
SaveExploits0References1
NCSC
NCSC
added 2026/07/31 9:11 a.m.17 views

vulnerabilities in Adobe Campaign Classic

Adobe has identified vulnerabilities in Adobe Campaign Classic ACC. The first vulnerability relates to incorrect authorization in ACC’s core authorization mechanisms, allowing attackers to execute arbitrary code without any user interaction. This means that attackers can perform actions beyond th...

10CVSS6.3AI score0.00958EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 5:00 p.m.14 views

EUVD-2026-51200

IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

9.8CVSS6.4AI score0.00567EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/30 5:00 p.m.128 views

CVE-2026-12118

CVE-2026-12118 affects IBM webMethods Integration (on-prem) versions 10.15 and 10.11 due to deserialization of untrusted data in the bundled WmServiceMock package, allowing an unauthenticated remote attacker to execute arbitrary code. There is no product patch; remediation is to remove the WmServ...

9.8CVSS6.4AI score0.00567EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/27 4:11 p.m.11 views

EUVD-2026-49334

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

10CVSS6AI score0.01568EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:17 p.m.10 views

CVE-2026-47007

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications component: On-premise Deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logo...

7.3CVSS0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.15 views

PT-2026-62172

Name of the Vulnerable Software and Affected Versions Oracle Communications Pricing Design Center versions 15.0.0.0.0 through 15.2.0.0.0 Description A flaw in the On-premise Deployment component allows a low-privileged attacker with access to the infrastructure where the software executes to...

7.3CVSS7.2AI score0.00151EPSS
SaveExploits0References4
NCSC
NCSC
added 2026/07/14 6:31 p.m.15 views

Vulnerabilities in Microsoft Exchange

Microsoft has addressed vulnerabilities in Exchange, both Online and on-premise versions. A malicious individual could exploit these vulnerabilities to impersonate other users, gain elevated privileges, execute arbitrary code, and thereby access sensitive data. The vulnerability in Exchange Onlin...

9.6CVSS6.3AI score0.02513EPSS
SaveExploits1
OSV
OSV
added 2026/07/07 4:03 p.m.16 views

PYSEC-2026-1217 BBOT's gitlab.py exposes globally configured "gitlab" API key

Summary bbot's gitlab.py sends the user's "gitlab" API key to on-premise GitLab instances. If a user has configured a gitlab.com API key using this mechanism, it may be leaked to an attacker-controlled server. Impact A user with a "gitlab" API key configured who uses bbot to scan a malicious...

4.7CVSS5.9AI score0.00213EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/06/10 2:59 a.m.17 views

CVE-2026-44744

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/09 12:20 a.m.53 views

CVE-2026-44744

Affected software : SAP S/4HANA On-Premise. Vulnerability : SQL injection in a remote-enabled function module component. Root cause / what’s vulnerable : An authenticated attacker could influence SQL queries via the affected function module, potentially enabling unauthorized database queries. Imp...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/09 12:20 a.m.19 views

EUVD-2026-35281

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/09 12:20 a.m.12 views

CVE-2026-44744 SQL Injection vulnerability in SAP S/4HANA

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References2
Rows per page
Query Builder