patch-CVE-2026-11553

Parche: CVE-2026-11553 Detalles de la Vulnerabilidad CVE : CVE-2026-11553 Producto : VMware vCenter Descripción : Omisión de autenticación Gravedad : Crítica Estado del Parche: DESPLEGADO...

CVE-2021-21972

Check CVE-2021-21972 CVE-2021-21972 vCenter-6.5-7.0 RCE POC...

CVE-2021-21972

Laboratorio de Investigación RCE en VMware vCenter Server — CVE-2021-21972 Autor: Niranjan Pokhrel Proyecto de investigación independiente que reproduce y documenta una vulnerabilidad crítica y divulgada públicamente en VMware vCenter Server en un laboratorio doméstico aislado, para comprender la...

CVE-2024-22275

CVE-2024-22275: Partial File Read in VMware vCenter Server The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. Vendor...

CVE-2021-21974_vuln_dectection

CVE-2021-21974 Vulnerability Detector A Python-based security tool for detecting CVE-2021-21974 vulnerability in SLP Service Location Protocol implementations, specifically targeting VMware ESXi systems. This tool performs safe, non-exploitative detection by analyzing SLP service responses and...

CVE-2021-21974

CVE-2021-21974 VMware ESXi OpenSLP Heap Overflow Remote Code Execution PoC Author: Aiyakami Overview CVE-2021-21974 is a heap overflow vulnerability in the OpenSLP service in VMware ESXi. An unauthenticated attacker can send specially crafted packets over the network to the target ESXi host's SLP...

CVE-2022-22954

CVE-2022-22954 Vulnerabilidad de ejecución remota de código en VMware Workspace ONE Access Desarrollado por:Junsheng @Laboratorio de Ciberseguridad Orange Laboratorio de Ciberseguridad Orange https://0range.team/ 0x00 Resumen de Riesgos Esta herramienta está destinada únicamente a su uso en prueb...

CVE-2021-22005

CVE-2021-22005 VMware vCenter RCE CVE-2021-22005 one-liner mass checker cat vmwarecenters.txt | while read S do; do curl --connect-timeout 15 --max-time 30 --silent --insecure --user-agent "vAPI/2.100.0 Java/1.8.0261 Linux; 4.19.160-6.ph3; amd64" -X POST...

Vmware-ESXI

CVE-2024-37085 unauthenticated shell upload to full administrator on domain-joined esxi hypervisors. Download ESXIVORTEX Details: an authentication bypass which leads to shell upload in context of vpxuser leading to full administrative permission on domain-joined ESXI hypervisors. in order to...

vmware_vcenter_cve_2020_3952

Prueba de concepto para CVE-2020-3952 Este es un corto fragmento de código que explota CVE-2020-3952, el cual se describe en detalle en la publicación de Guardicore Labs aquí. Esta vulnerabilidad fue publicada por VMware en abril de 2020 con una puntuación CVSS máxima de 10.0. Permite a un atacan...

CVE-2021-21972

Usage & Disclaimer VMware vCenter Server Remote Code Execution Vulnerability CVE-2021-21972 Usage: Python CVE-2021-21972.py urls.txt Each URL in urls.txt is on a single line, vulnerable addresses are output to vul.txt Affected Versions: VMware vCenter Server 7.0 series 7.0.U1c VMware vCenter Serv...

westone-CVE-2021-21980-scanner

westone-CVE-2021-21980-scanner Las versiones anteriores de VMware vCenter 7.0.2.00100 tienen una vulnerabilidad de lectura de archivos arbitrarios no autorizada + SSRF + XSS Instalación y Uso git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd westone-CVE-2021-21980-scanne...

CVE-2022-22954

Analysis of CVE-2022-22954 Overview Workspace ONE Access workspace delivery as a service model provides multi-factor authentication, single sign-on, and conditional access for SaaS, web, and mobile applications. CVE-2022-22954 is a Server-side Template Injection vulnerability existing in the...

Spring Data Commons - Remote Code Execution

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted request parameters...

vmware-escape-CVE-2023-20872-poc

vmware-escape-CVE-2023-20872-poc...

exp_hub

0x01 Nota Este proyecto se proporciona únicamente para pruebas de penetración legales y para el aprendizaje de referencia de los entusiastas. Por favor, cumplan con la «Ley de Seguridad Cibernética de la República Popular China» y las leyes locales correspondientes. Está prohibido utilizar este...

metasploitable-penetration-testing-lab

🔐 Metasploitable 2 Penetration Testing Lab A controlled cybersecurity lab project demonstrating vulnerability discovery, exploitation, post-exploitation validation, and defensive mitigation within an isolated virtual environment. 📌 Project Overview This project simulates a real-world penetration...

DashOverride

DashOverride Qué Este es un exploit de RCE pre-autenticado para VMware vRealize Operations Manager vROPS que afecta a las versiones Ejecución ro...

PIVert

PIVert - Emulador de tarjeta inteligente PIV Introducción PIVert es un emulador de tarjeta inteligente PIV NIST SP 800-73. Puede proporcionar a PIVert un archivo PFX que contenga un certificado y su clave privada correspondiente, y la herramienta emulará la tarjeta ante Windows como una tarjeta P...

vcenter-cve-2021-21980-lab

CVE-2021-21980 Vulnerable Test Environment Overview Realistic test environment simulating VMware vSphere Web Client path traversal vulnerability. ⚠️ WARNING: Vulnerable test environment. Do NOT expose to internet! Quick Start Build and Run root@kitploit: podman build -t vcenter-lab . podman run -d...