fleet-cve-scanner

fleet-cve-scanner Un escáner de CVE de código abierto y script único para flotas gestionadas por RMM. PowerShell 7 puro, sin agentes, sin dispositivos, sin tarifas de licencia. Responde una pregunta por cada pieza de software en cada endpoint que gestionas: ¿la versión instalada se sabe vulnerabl...

dRMM-CVE-2020-1350-response

Resumen Microsoft anunció CVE-2020-1350 el 14 de julio de 2020. Esta vulnerabilidad en el servidor DNS de Windows se remonta a Server 2003 y se cree ampliamente que es propagable wormable. Este script sigue las instrucciones de KB456509...

Ransomware-Tool-Matrix

Matriz de Herramientas de Ransomware Este repositorio contiene una lista de las herramientas que utiliza cada banda de ransomware o banda de extorsión Como defensores, debemos aprovechar el hecho de que muchas de las herramientas utilizadas por estos ciberdelincuentes se reutilizan con frecuencia...

Serious-Sam---CVE-2021-36934-Mitigation-for-Datto-RMM

Overview This is a Datto RMM component to mitigate CVE-2021-36934, aka Serious SAM. It follows the mitigation measures outlined at: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 USE AT YOUR OWN RISK. EXPECT THIS TO BREAK SOME BACKUPS...

N-able N-central < 2026.3.1.10 - Authentication Bypass

N-able N-central versions through 2026.3.1 contain an authentication bypass that lets a remote unauthenticated attacker take over an administrator account and gain full control of the N-central server. CVE-2026-18577 is a bypass of the incomplete fix for CVE-2026-18556, so the 2026.3.1 Hotfix 1...

CVE-2025-69516

CVE-2025-69516 - Ejecución remota de código en Tactical RMM Este repositorio contiene un script de Python que automatiza la explotación de la vulnerabilidad SSTI CVE-2025-69516 en Tactical RMM. Ha sido probado en la versión 1.3.1. Uso python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id"...

CVE-2025-69516

CVE-2025-69516 - Ejecución Remota de Código en Tactical RMM Este repositorio contiene un script de Python que automatiza la explotación de la vulnerabilidad SSTI CVE-2025-69516 en Tactical RMM. Ha sido probado en la versión 1.3.1. Uso python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id"...

LOLRMM

LOLRMM - Living Off the Land Remote Monitoring and Management 🖥️🔍 Bienvenido a LOLRMM Living Off the Land Remote Monitoring and Management, un proyecto impulsado por la comunidad que proporciona una lista curada de herramientas de Monitorización y Gestión Remota RMM que podrían ser potencialmente...

CVE-2026-86218-N-central-IOC-Toolkit

CVE-2026-86218 — N-able N-central 사전 인증 RCE | IOC 및 탐지 툴킷 CVSS 10.0 치명적 · 사전 인증 원격 코드 실행 · 정적 코드 주입 CWE-96 · 실제 악용 중 · CISA KEV -yellow 유지관리자: @jithinkrishnanrs · 저장소: github.com/jithinkrishnanrs/CVE-2026-86218-N-central-IOC-Toolkit CVE-2026-86218 — 관리형 서비스 제공업체MSP가 널리 사용하는 온프레미스 및 호스팅 원격 모니터링 및...

Exploit for Static Code Injection in N-Able N-Central

CVE-2026-86218 — N-able N-central Pre-Authentication RCE | IOC...

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet formerly UNC5669 since 2024. Google Threat Intelligence Group GTIG and Mandiant teams described the threat actor as "specializing in manipulating...

MINI-RMM5-9MCG-FWWV

Bulletin has no description...

N-able N-central authorization issue vulnerability

N-able N-central is a remote monitoring and management system developed by the Canadian company N-able. Versions of N-able N-central prior to 2026.1 contained security vulnerabilities. Attackers could exploit these vulnerabilities to bypass authentication processes...

From cause to cash: a cross-border look at hacktivist activity

While tracking the activities of 4BID we uncovered a new string of campaigns that appear to be the work of several interconnected actors. While politically motivated groups generally limit their scope to specific nations – for 4BID and its peers, primarily Russian and occasionally Belarusian...

EUVD-2026-23116

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

CVE-2026-22676

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

CVE-2026-22676 Barracuda RMM < 2025.2.2 Privilege Escalation via Insecure Directory Permissions

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

Barracuda RMM 安全漏洞

Barracuda RMM is a remote monitoring and management platform developed by the American company Barracuda. Versions of Barracuda RMM prior to 2025.2.2 contained security vulnerabilities. These vulnerabilities stemmed from excessive permissions in the file system access control list, which could...

CVE-2026-22676: Incorrect Permission Assignment for Critical Resource

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

Metasploit Wrap-Up 03/06/2026

Encoder exposed! Some of our releases add new ways in; this one adds new ways to stay in. There are, of course, still new RCE toys in the box Tactical RMM via Jinja2 SSTI and an unauthenticated MajorDoMo exploit. Still, the underlying theme is payloads: more control over how they are packaged and...