120 matches found
CVE-2021-26837
CVE-2021-26837 HelpSystems / Fortra DeliverNow में SQL इंजेक्शन DeliverNow के लॉग खोज पृष्ठ /LogGrid.aspx पर SearchTextbox पैरामीटर को बिना किसी पैरामीटराइज़ेशन और बिना सर्वर-साइड सत्यापन के सीधे SQL Server क्वेरी में जोड़ दिया जाता है। एप्लिकेशन परिणामी SQL Server पार्सर त्रुटियों को भी उपयोगकर्...
CVE-2023-34362
CVE-2023-34362 CVE-2023-34362 के लिए POC जो MOVEit Transfer को प्रभावित करता है तकनीकी विश्लेषण इस कमजोरी का तकनीकी मूल कारण विश्लेषण ब्लॉग पर पाया जा सकता है: सारांश यह POC एक SQL इंजेक्शन का दुरुपयोग करके sysadmin API एक्सेस टोकन प्राप्त करता है और फिर उस एक्सेस का उपयोग करके एक deserialization...
mssqlproxy
mssqlproxy mssqlproxy एक उपकरण है जो प्रतिबंधित वातावरण में सॉकेट पुन: उपयोग के माध्यम से एक समझौता किए गए Microsoft SQL Server के माध्यम से पार्श्व आंदोलन करने के लिए है। क्लाइंट को impacket और SQL सर्वर पर sysadmin विशेषाधिकारों की आवश्यकता होती है। कृपया जारी रखने से पहले यह लेख ध्यान से पढ़ें...
test-your-sysadmin-skills
:star: "المدير العظيم لا يحتاج إلى معرفة كل شيء، لكن يجب أن يكون قادرًا على تقديم حلول مذهلة لمشاريع مستحيلة. " - cwheeler33 ServerFault :star: "مهاراتي هي جعل الأشياء تعمل، وليس معرفة مليارات الحقائق. ... إذا كنت بحاجة إلى إصلاح نظام، سأحدد المشكلة، وأتفقد السجلات، وأبحث عن الأخطاء. إذا كنت بحاج...
mssqlproxy
mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...
sysmon-modular
sysmon-modular | A Sysmon configuration repository for everybody to customise This is a Microsoft Sysinternals Sysmon download here configuration repository, set up modular for easier maintenance and generation of specific configs. Please keep in mind that any of these configurations should be...
aws-key-disabler
AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...
CVE-2026-12673
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in their managed secondary non-default group...
PT-2026-42209
Name of the Vulnerable Software and Affected Versions Boxlite versions prior to 0.9.0 Description Boxlite is a sandbox service that allows users to create lightweight virtual machines and launch OCI containers to run untrusted code. The software fails to properly enforce read-only mounts for host...
CVE-2025-59920
When hours are entered in time@work, version 7.0.5, it performs a query to display the projects assigned to the user. If the query URL is copied and opened in a new browser window, the ‘IDClient’ parameter is vulnerable to a blind authenticated SQL injection. If the request is made with the TWAdm...
CVE-2025-59920
When hours are entered in time@work, version 7.0.5, it performs a query to display the projects assigned to the user. If the query URL is copied and opened in a new browser window, the ‘IDClient’ parameter is vulnerable to a blind authenticated SQL injection. If the request is made with the TWAdm...
CVE-2025-59920 SQL injection in time@work from systems@work
When hours are entered in time@work, version 7.0.5, it performs a query to display the projects assigned to the user. If the query URL is copied and opened in a new browser window, the ‘IDClient’ parameter is vulnerable to a blind authenticated SQL injection. If the request is made with the TWAdm...
CVE-2025-59920
CVE-2025-59920 affects time@work v7.0.5: when hours are entered, a query to display a user’s assigned projects can be exposed. Copying the query URL and opening it in a new browser window makes the ‘IDClient’ parameter vulnerable to blind authenticated SQL injection. If the attacker uses a TWAdmi...
D-Link DCS-931L 操作系统命令注入漏洞
The D-Link DCS-931L is a wireless camera from the D-Link company. Versions of D-Link DCS-931L prior to 1.13.0 have a vulnerability related to operating system command injection. This vulnerability arises from manipulating the parameter AdminID in the file/goform/setSysAdmin, which may lead to...
EUVD-2025-200320
NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database. The SQL user account 'nmdbuser' and other created accounts by default have the sysadmin role. This can lead to remote code execution through the use of certain built-in stored procedures...
CVE-2025-62575
NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database. The SQL user account 'nmdbuser' and other created accounts by default have the sysadmin role. This can lead to remote code execution through the use of certain built-in stored procedures...
CVE-2025-62575
CVE-2025-62575 concerns NMIS/BioDose software (V22.02 and earlier) that relies on a Microsoft SQL Server database. The root cause is that the default SQL account nmdbuser (and other created accounts) has the sysadmin role, enabling potential remote code execution through certain built‑in stored p...
PT-2025-48778
NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database. The SQL user account 'nmdbuser' and other created accounts by default have the sysadmin role. This can lead to remote code execution through the use of certain built-in stored procedures...
SUSE-SU-2025:20905-1 Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0Update6 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayedfree bsc1246075 - CVE-2025-38396: fs: export anoninodemakesecureinode and fix secretmem LSM bypass bsc1247158 - CVE-2025-38471: kernel: tls: always refresh the queue wh...