Exploit for Code Injection in Vmware Spring_Framework

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with...

VMware Cloud Foundation XML Link Information Disclosure

The vulnerability of VMware Cloud Foundation’s virtualization platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose sensitive information using specially created XML code...

VMSA-2022-0029:VMware Tools for Windows update addresses a denial-of-service vulnerability

Advisory ID: VMSA-2022-0029 CVSSv3 Range: 3.3 Issue Date:2022-11-29 Updated On: 2022-11-29 Initial Advisory CVEs: CVE-2022-31693 Synopsis: VMware Tools for Windows update addresses a denial-of-service vulnerability CVE-2022-31693 RSS Feed Download PDF Download Text File Share this page on social...

Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester

Summary From mid-June through mid-July 2022, CISA conducted an incident response engagement at a Federal Civilian Executive Branch FCEB organization where CISA observed suspected advanced persistent threat APT activity. In the course of incident response activities, CISA determined that cyber...

VMware Workspace ONE Assist Session Management Unauthorized Access

The vulnerability of the remote access tool for VMware Workspace ONE Assist is related to improper session management. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the application...

Design/Logic Flaw

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled...

PT-2022-7720

Name of the Vulnerable Software and Affected Versions open-vm-tools version 2009.03.18-154848 Description An issue was discovered in open-vm-tools where local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory functi...

VMware open-vm-tools 后置链接漏洞

VMware open-vm-tools is a set of services and modules from VMware, Inc. It includes kernel modules to enhance the performance of virtual machines running Linux or other VMware-supported Unix-like guest operating systems. A security vulnerability exists in VMware open-vm-tools version...

CVE-2009-1142: Improper Link Resolution Before File Access

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled...

ignition security, bug fix, and enhancement update

2.14.0-1 - New release - Add ignition-apply symlink - Add ignition-rmcfg symlink and ignition-delete-config.service 2.13.0-2 - Rename -validate-nonlinux subpackage to -validate-redistributable - Add static Linux binaries to -redistributable - Fix macro invocation in comment - Avoid kernel lockdow...

Oracle Linux 9 : ignition (ELSA-2022-8126)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-8126 advisory. 2.14.0-1 - New release - Add ignition-apply symlink - Add ignition-rmcfg symlink and ignition-delete-config.service 2.13.0-2 - Rename -validate-nonlinux...

AlmaLinux 9 : ignition (ALSA-2022:8126)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:8126 advisory. - A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only...

Metasploit Weekly Wrap-Up

Pre-authenticated Remote Code Execution in VMware NSX Manager using XStream CVE-2021-39144 There’s nothing quite like a pre-authenticated remote code execution vulnerability in a piece of enterprise software. This week, community contributor h00die-gr3y added a module that targets VMware NSX...

Iranian hackers leveraged Log4Shell to penetrate US federal agency

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Iranian APT activity was detected on the networks of federal agencies. The intruders utilized an exploit targeting Log4Shell CVE-2021-44228 to install XMRig crypto mining software on an unpatched VMware...

Iranian Hackers Compromised a U.S. Federal Agency's Network Using Log4Shell Exploit

Iranian government-sponsored threat actors have been blamed for compromising a U.S. federal agency by taking advantage of the Log4Shell vulnerability in an unpatched VMware Horizon server. The details, which were shared by the U.S. Cybersecurity and Infrastructure Security Agency CISA, come in...

PT-2022-6255 · Hitachi · Hitachi Storage Plug-In For Vmware Vcenter

Name of the Vulnerable Software and Affected Versions: Hitachi Storage Plug-in for VMware vCenter versions 04.8.0 through 04.9.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows remote authenticated users to cause privilege escalation. This can be...

VMware NSX Manager XStream Unauthenticated Remote Code Execution Exploit

VMware Cloud Foundation NSX-V contains a remote code execution vulnerability via XStream open source library. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. Due to an unauthenticated endpoint that leverages XStream for...

CISA and FBI Release Advisory on Iranian Government-Sponsored APT Actors Compromising Federal Network

Today, CISA and the Federal Bureau of Investigation FBI published a joint Cybersecurity Advisory CSA, Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester. The CSA provides information on an incident at a Federal Civilian Executive Branch...

RHEL 9 : ignition (RHSA-2022:8126)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:8126 advisory. Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files regular...

VMware Workspace One Assist Multiple Vulnerabilities (VMSA-2022-0028)

The VMware Workspace One Assist server running on the remote host is affected multiple vulnerabilities, including the following: - VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may be able ...