CVE-2026-26333

Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs including EndeavorServer.rem and RemoteFileReceiver.rem and permits the use of SOAP and binary formatters with TypeFilterLevel set to Full. An...

CVE-2026-25067

SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day preview endpoint. The application base64-decodes attacker-supplied input and uses it as a filesystem path without validation. On Windows systems, this allows U...

EUVD-2010-2357

Malware in sbrugna...

EUVD-2019-18936

Malware in sbrugna...

EUVD-2016-6117

Malware in sbrugna...

EUVD-2015-4866

Malware in sbrugna...

EUVD-2015-4903

Malware in sbrugna...

EUVD-2021-8743

Malicious code in bioql PyPI...

EUVD-2022-0662

Malicious code in bioql PyPI...

CVE-2025-55234

SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against...

KB5065428: Windows 10 version 1809 / Windows Server 2019 Security Update (September 2025)

The remote Windows host is missing security update 5065428. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

KB5065511: Windows Server 2008 Security Update (September 2025)

The remote Windows host is missing security update 5065511. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

KB5065507: Windows Server 2012 R2 Security Update (September 2025)

The remote Windows host is missing security update 5065507. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

KB5065432: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2025)

The remote Windows host is missing security update 5065432 or hotpatch 5065306. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform rela...

KB5065427: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2025)

The remote Windows host is missing security update 5065427. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

KB5065426: Windows 11 Version 24H2 / Windows Server 2025 Security Update (September 2025)

The remote Windows host is missing security update 5065426 or hotpatch 5065474. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform rela...

KB5065510: Windows Server 2008 R2 Security Update (September 2025)

The remote Windows host is missing security update 5065510. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

CVE-2022-29281

Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link. There is improper validation of the file URI scheme. A hyperlink to an SMB share could lead to execution of an arbitrary program or theft of NTLM credentials via an SMB relay attack,...

CVE-2021-21472

SAP Software Provisioning Manager 1.0 SAP NetWeaver Master Data Management Server 7.1 does not have an option to set password during its installation, this allows an authenticated attacker to perform various security attacks like Directory Traversal, Password Brute force Attack, SMB Relay attack,...

CVE-2019-9565

Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perform SMB relay attacks upon a direct launch of the product, or upon an indirect launch via an integration such as Chrome, Firefox, Word, Outlook, etc. This occu...