CVE-2021-21975

영향을 받는 제품 VMware vRealize Operations 8.3.0、8.2.0、8.1.1、8.1.0、7.5.0 VMware Cloud Foundation 4.x、3.x vRealize Suite Lifecycle Manager 8.x 설명 2021년 3월 31일, VMware는 vmsa-2021-0004 위험 공지를 공식적으로 발표했습니다. 취약점 번호는 cve-2021-21975 및 cve-2021-21983이며, 취약점 등급은 고위험, 취약점 점수는 8.6입니다. CVE-2021-21975: vRealize...

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

CVE-2021-46075 익스플로잇 제목: Vehicle Service Management System - 'Multiple' 권한 상승으로 CRUD 작업 가능 익스플로잇 작성자: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 높음 참고 자료: https://www.plsanu.com/vehicle-service-management-system-multiple-privilege-escalation-leads-to-crud-operations...

Red-Team-Management

Red-Team-Assessment 重要文档，助你启动红队管理 工具 法律诉讼 方法论 技巧与诀窍 作者：Joas Antonio 参考：Red Team Guide 和 Red Team Operations & Development...

EUVD-2026-68407

ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace before performing ToolJet DB table operations. A workspace admin can create, view, and delete database tables in another workspace by replacing the organizationId parameter in...

CVE-2026-82858

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, causing untrusted reconciliation input to be treated as trusted. An attacker can supply malicious execute plans that bypass security checks and perform unsafe reconciliation oper...

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...

Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution

Micro Focus Operations Bridge Manager in versions 2020.05 and below is vulnerable to remote code execution via UCMDB. The vulnerability allows remote attackers to execute arbitrary code on affected installations of Data Center Automation. An attack requires network access and authentication as a...

CVE-2025-41244

CVE-2025-41244 VMware Aria Operations 및 VMware Tools에는 로컬 권한 상승 취약점이 있습니다. SDMP가 활성화된 Aria Operations에서 관리되고 VMware Tools가 설치된 VM에 접근 권한이 있는 비관리자 권한의 악의적인 로컬 사용자는 이 취약점을 악용하여 동일한 VM에서 root 권한으로 권한을 상승시킬 수 있습니다. 이 스크립트는 어떻게 실행하나요? 1. 여기에서 Nuclei를 다운로드하세요 2. 템플릿을 로컬 시스템에 복사하세요 3. 다음 명령어를 실행하세요:...

EUVD-2026-68306

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ashai allows a caller of an identity-configured tool to update or destroy records it never identified, including every row in the table. In AshAi.Tool.Execution, identityfilter/3 built the update/destroy filter directly...

Linux Distros Unpatched Vulnerability : CVE-2026-18704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections...

security-operations-labs

安全运营实验室 概述 本仓库将高校背景下的防御性安全工作以适合公开复现的形式重新整理。重点在于方法论、可复现的实验室、验证以及所开发措施的局限性——而非发布课程材料。 包含的项目...

CVE-2026-66493

ファイル操作におけるパストラバーサル（削除 / コピー / 移動） PhocaCommander ≤ 6.1.3 — 認証済み管理者がWebルート外のファイルを操作できる 概要 PhocaCommander のファイルアクションハンドラは、攻撃者が制御するbase64エンコードされたパラメータ（pathfrom、pathwhere）からソースパスとデスティネーションパスを構築しますが、パス封じ込めの検証を一切行いません。認証済み管理者は、Webサーバープロセスがアクセス可能なファイルシステム上の任意の場所で、ファイルの削除、コピー、移動ができます。 ラボで確認済み:...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: root@kitploit:...

CVE-2025-6019-udisks-lpe-no-image

CVE-2025-6019-udisks-lpe-no-image Catena di escalation dei privilegi basata solo su script che utilizza CVE-2025-6019 e UDisks2 nessuna immagine del filesystem inclusa. Crediti, Contesto e Catena dell'Exploit Questo repository non introduce una nuova vulnerabilità. La tecnica di escalation dei...

CVE-2026-82460 Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown

Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...

CVE-2026-82460 Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown

Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...

EUVD-2026-68117

Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...

CVE-2026-82460

Cloud Commander before 19.20.2 contains a directory traversal vulnerability in its REST file-operation and markdown endpoints, caused by improper path normalization validation. An unauthenticated, remote attacker can use path traversal sequences to read, write, move, or copy files outside the con...

CVE-2021-46075

CVE-2021-46075 Titolo dell'exploit: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Autore dell'exploit: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH Riferimenti:...

wakuwaku

AppleDog/hook Questo repository fa parte di un PoC per sfruttare CVE-2024-32002, una vulnerabilità in Git che consente RCE durante le operazioni di clonazione. Questo repository contiene hook dannosi utilizzati per sfruttare la vulnerabilità. Panoramica Per una spiegazione dettagliata dello...