CVE-2020-1313

CVE-2020-1313 Résumé Le service Windows Update Orchestrator est un service DCOM utilisé par d'autres composants pour installer les mises à jour Windows déjà téléchargées. USO était vulnérable à une élévation de privilèges tout utilisateur vers le système local en raison d'une autorisation...

Vanquish

Vanquish – Accéder au Shell Vanquish est un orchestrateur d'énumération basé sur Kali Linux, construit en Python. Vanquish exploite les outils d'énumération open-source de Kali pour effectuer plusieurs phases actives de collecte d'informations. Les résultats de chaque phase sont transmis à la pha...

CVE-2024-29855

CVE-2024-29855 Обход аутентификации Veeam Recovery Orchestrator CVE-2024-29855 от Sina Kheirkhah @SinSinology из SummoningTeam @SummoningTeam Технический анализ Полный анализ первопричины уязвимости можно найти в моем блоге Краткое описание Veeam опубликовала уведомление CVSS 9 об уязвимости обхо...

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – Exploit de contrôle d'accès inapproprié dans FortiManager PoC PoC Proof of Concept - Usage éducatif uniquement Exploit d'accès non autorisé à l'orchestrateur SD-WAN dans FortiManager, exploitant un défaut de contrôle d'accès CWE-284. Description La vulnérabilité CVE-2021-24006...

CVE-2021-24006

CVE-2021-24006 – FortiManager 부적절한 접근 제어 익스플로잇 PoC PoC Proof of Concept - 교육용으로만 사용하십시오 FortiManager의 SD-WAN Orchestrator에 대한 부적절한 접근 익스플로잇, 접근 제어 취약점 CWE-284을 악용합니다. 설명 취약점 CVE-2021-24006 은 FortiManager 버전 6.4.0 6.4.3에 영향을 미치며, 제한된 프로필을 가진 인증된 사용자 가 인터페이스를 통한 명시적 권한 없이 SD-WAN Orchestrator 대시보드...

COMahawk

COMahawk Повышение привилегий: использование CVE-2019-1405 и CVE-2019-1322 Видео-демонстрация https://vimeo.com/373051209 Использование Скомпилируйте или скачайте из релиза https://github.com/apt69/COMahawk/releases 1. Запустите COMahawk.exe 2. ??? 3. Надеемся, профит или 1. COMahawk.exe...

MassScanning-CVE-2025-55182

Непрерывный сканер VPS Легковесная система оркестрации и сканер-воркер для выполнения крупных/непрерывных сканирований по разделённым входным файлам. Этот репозиторий содержит скрипты оркестрации, образ воркера на основе Docker и вспомогательные скрипты для многократного запуска сканирований и...

Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. id: CVE-2021-38146 info: name: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Downloa...

McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting

McAfee ePolicy Orchestrator before 5.10.9 Update 9 is vulnerable to a cross-site scripting vulnerability that allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized. reference: -...

Wipro Holmes Orchestrator 20.4.1 - Information Disclosure

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...

harpyTools

Utilitaires d'automatisation de post-exploitation et de relais Active Directory Ce dépôt contient une collection de scripts d'orchestration Python conçus pour les évaluations de sécurité et les tests d'intrusion dans les environnements Active Directory. Ces outils sont spécifiquement conçus pour...

purpleteam-orchestrator

purpleteam orchestrator Компонент-оркестратор purpleteam - В настоящее время в альфа-версии Клонируйте этот репозиторий. Перейдите в корневую директорию репозитория cd и выполните: root@kitploit: npm install...

gitlab-profile

STATUT DU TEST : ↳ core-orchestrator tester ↳ documentation tester DATE DE CRÉATION: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ Ce projet est en version bêta ! 🎉 Oui ! Nous sommes heureux d'annoncer que la version bêta sera bientôt terminée ! À partir de la version 0.153,...

UsoDllLoader

UsoDllLoader ⚠️ Mise à jour du 2020-06-06 : cette astuce ne fonctionne plus sur les dernières versions de Windows 10 Insider Preview. Cela signifie que, bien qu'elle fonctionne encore sur la version standard de Windows 10 , vous devriez vous attendre à ce qu'elle soit corrigée dans les mois à...

EUVD-2026-63115

In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete Splunk Processing Language version 2 SPL2 modules belonging to other users through the data management orchestrator interface. The vulnerability does not affect Splunk...

CVE-2026-76263

In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete Splunk Processing Language version 2 SPL2 modules belonging to other users through the data management orchestrator interface. The vulnerability does not affect Splunk...

AI-PASSWORD-TESTING-AGENT

AI Password Attack Orchestrator - 방어 연구 저장소 ⚠️ 법적 고지 및 연구 목적 본 저장소는 방어적 사이버보안 연구 및 교육 목적으로만 제공됩니다 악용 가능한 코드 없음 - 본 저장소에는 이론적 연구, 개념 분석 및 방어적 대응 방안만 포함되어 있습니다 공격 도구 없음 - 작동하는 익스플로잇, 공격 스크립트 또는 자동화된 공격 도구는 포함되어 있지 않습니다 방어 중심 - 모든 콘텐츠는 조직이 AI 강화 비밀번호 공격으로부터 방어할 수 있도록 설계되었습니다 학술 연구 - 보안 전문가 및 연구자를...

CVE-2026-76263

Splunk Enterprise versions below 10.4.2 and 10.2.6 have a broken object-level authorization flaw in the data management orchestrator REST API, allowing low-privilege users to delete SPL2 modules owned by other users. CVSS 5.4 (MEDIUM). Patch to 10.4.2 or 10.2.6; see advisory SVD-2026-0801. No in-...

CVE-2026-61270

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD...

CVE-2026-61265

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise ...