CVE-2021-34473-scanner

CVE-2021-34473-scanner Сканер для CVE-2021-34473, ProxyShell, уязвимости Microsoft Exchange On-premise Для проверки машин по одной используйте scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr Для одновременной проверки нескольких машин используйте mass-scanner и добавьте...

itsm-exploit

Ivanti Neurons for ITSM온프레미스용 익스플로잇 이 스크립트는 인증되지 않은 공격자가 Ivanti Neurons for ITSM온프레미스에서 관리자 액세스 권한을 얻고 원격 명령을 실행할 수 있게 하는 여러 결함CVE-2023-46808을 악용합니다. 기술적 세부 사항은 기술 세부 사항을 참조하세요. 영향을 받는 버전 2021.1.0.2021060601 부터 2020.4.0.2021033001 까지의 버전이 영향을 받으며, 이전 버전도 취약할 가능성이 높습니다. 사용법 요구 사항 설치: root@kitploit...

ExchangeRelayX

ExchangeRelayX Версия 1.0.0. Этот инструмент является PoC для демонстрации возможности атакующего выполнить NTLM relay-атаку на основе SMB или HTTP на конечную точку EWS локального сервера Microsoft Exchange с целью компрометации почтового ящика жертвы. Инструмент предоставляет атакующему...

FACT

포렌식 아티팩트 수집 도구 개요 FACT는 클라우드 또는 온프레미스에서 실행되는 머신 클러스터로부터 포렌식 데이터를 수집, 처리 및 시각화하는 도구입니다. 배포 기본 단일 노드 배포의 경우 Docker 및 Docker Compose 사용을 권장합니다. 먼저 구성 및 요구사항을 위해 docker-compose.yaml을 읽어보세요. 그런 다음 다음 명령어로 스택을 시작합니다. root@kitploit: docker-compose up -d 자세한 내용 및 다른 배포 방법에 대해서는 설치 가이드를 참조하세요. FACT 사용하기 사...

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

vaultize_CVE-2024-36079

취약점 정보 온프레미스 Vaultize DRM v.21.07.27은 임의 파일 업로드에 취약합니다. 파일 이름이 파일 시스템의 절대 경로 일부를 포함하는 경우 파일명 필터링이 없어 업로드될 수 있습니다. 파일을 다운로드하려고 하면 애플리케이션이 파일 시스템의 최종 경로에 임시 파일을 생성합니다. 이 파일은 다운로드가 완료될 때까지 존재하다가 삭제됩니다. 이로 인해 공격자는 애플리케이션의 권한으로 모든 디렉터리에 임의 파일을 쓸 수 있습니다. 데모 제품 배포의 한 형태는 애플리케이션의 온프레미스 버전이 설치된 사전 구축 VMwa...

CVE-2023-3897

CVE-2023-3897 ユーザー名の列挙が可能です。On-premise SureMDM Solution on Windows deploymentにおいて、CAPTCHAをバイパスすることで、攻撃者はエラーメッセージを介してローカルユーザー情報を列挙できます。 この問題はSureMDM On-premise 6.31およびそれ以下のバージョンに影響します。 https://nvd.nist.gov/vuln/detail/CVE-2023-3897...

CVE-2026-15933

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext, allowing an authenticated administrator to view previously configured passwords—SMTP , FTP (scan delivery), Active Directory (user list import), and SharePoint —in cleartext through the web administration panel p...

TeamPass

Teampass Самостоятельно размещаемый менеджер паролей, которому доверяет вся ваша команда Контроль доступа на уровне папок · аутентифицированное шифрование AES-256-GCM · доказательства соответствия требованиям Ваши секреты никогда не покидают вашу инфраструктуру. 🌐teampass.net · 📖Документация ·...

vulnerabilities in Adobe Campaign Classic

Adobe has identified vulnerabilities in Adobe Campaign Classic ACC. The first vulnerability relates to incorrect authorization in ACC’s core authorization mechanisms, allowing attackers to execute arbitrary code without any user interaction. This means that attackers can perform actions beyond th...

EUVD-2026-51200

IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-12118

CVE-2026-12118 affects IBM webMethods Integration (on-prem) versions 10.15 and 10.11 due to deserialization of untrusted data in the bundled WmServiceMock package, allowing an unauthenticated remote attacker to execute arbitrary code. There is no product patch; remediation is to remove the WmServ...

EUVD-2026-49334

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-47007

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications component: On-premise Deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logo...

PT-2026-62172

Name of the Vulnerable Software and Affected Versions Oracle Communications Pricing Design Center versions 15.0.0.0.0 through 15.2.0.0.0 Description A flaw in the On-premise Deployment component allows a low-privileged attacker with access to the infrastructure where the software executes to...

Vulnerabilities in Microsoft Exchange

Microsoft has addressed vulnerabilities in Exchange, both Online and on-premise versions. A malicious individual could exploit these vulnerabilities to impersonate other users, gain elevated privileges, execute arbitrary code, and thereby access sensitive data. The vulnerability in Exchange Onlin...

PYSEC-2026-1217 BBOT's gitlab.py exposes globally configured "gitlab" API key

Summary bbot's gitlab.py sends the user's "gitlab" API key to on-premise GitLab instances. If a user has configured a gitlab.com API key using this mechanism, it may be leaked to an attacker-controlled server. Impact A user with a "gitlab" API key configured who uses bbot to scan a malicious...

CVE-2026-44744

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

EUVD-2026-35281

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

CVE-2026-44744 SQL Injection vulnerability in SAP S/4HANA

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...