13334 matches found
CVE-2022-22953
CVE-2022-22953 affects VMware HCX (information disclosure vulnerability). A malicious actor with network access to the HCX appliance could access sensitive information. Root cause is an information disclosure in HCX; exploitation details are not provided beyond network access and potential data e...
CVE-2022-22953
VMware HCX update addresses an information disclosure vulnerability. A malicious actor with network user access to the VMware HCX appliance may be able to gain access to sensitive information...
PT-2022-15746 · Vmware · Vmware Hcx
Name of the Vulnerable Software and Affected Versions: VMware HCX affected versions not specified Description: The issue is related to an information disclosure vulnerability. A malicious actor with network user access to the VMware HCX appliance may be able to gain access to sensitive informatio...
VMware HCX 信息泄露漏洞
VMware HCX is an application mobility platform from VMware, Inc. Designed to simplify application migration, workload rebalancing and business continuity across data centers and clouds, VMware HCX versions 4.3.1 and 4.3.2 contain an information disclosure vulnerability stemming from the fact that...
VMware vCenter Extract Secrets from vmdir / vmafd DB File
Grab certificates from the vCenter server vmdird and vmafd database files and adds them to loot. The vmdird MDB database file can be found on the live appliance under the path /storage/db/vmware-vmdir/data.mdb, and the DB vmafd is under path /storage/db/vmware-vmafd/afd.db. The vmdir database...
VMSA-2022-0017:VMware HCX update addresses an information disclosure vulnerability
Advisory ID: VMSA-2022-0017 CVSSv3 Range: 2.7 Issue Date:2022-06-15 Updated On: 2022-06-15 Initial Advisory CVEs: CVE-2022-22953 Synopsis: VMware HCX update addresses an information disclosure vulnerability CVE-2022-22953 RSS Feed Download PDF Download Text File Share this page on social media: 1...
VMSA-2022-0016:VMware ESXi addresses DirectPath I/O (PCI-Passthrough) Information Leak vulnerabilities
Advisory ID: VMSA-2022-0016 CVSSv3 Range: 3.8 Issue Date:2022-06-14 Updated On: 2022-06-14 Initial Advisory CVEs: CVE-2022-21123, CVE-2022-21125, CVE-2022-21166 Synopsis: VMware ESXi addresses DirectPath I/O PCI-Passthrough Information Leak vulnerabilities CVE-2022-21123, CVE-2022-21125,...
Announcing Metasploit 6.2
Metasploit 6.2.0 has been released, marking another milestone that includes new modules, features, improvements, and bug fixes. Since Metasploit 6.1.0 August 2021 until the latest Metasploit 6.2.0 release we’ve added: 138 new modules 148 enhancements and features 156 bug fixes Top modules Each...
BlackBasta is the latest ransomware to target ESXi virtual machines on Linux
BlackBasta, an alleged subdivision of the ransomware group Conti, just began supporting the encryption of VMwares ESXi virtual machines VM installed on enterprise Linux servers. Because more and more organizations have begun using VMs for cost-effectiveness and easier management of devices, this...
5 Linux malware families SMBs should protect themselves against
There’s no shortage of reasons why an SMB might use Linux to run their business: There are plenty of distros to choose from, it’s generally free, and perhaps above all — it’s secure. The common wisdom goes that Linux malware is rare, and for the most part this is true. Thanks to its built-in...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
Spring-Cloud-Gateway-CVE-2022-22947 Security Notice regardi...
VMware vRealize Operations Manager API Arbitrary File Write (CVE-2021-21983)
An arbitrary file write vulnerability exists in VMware vRealize Operations Manager API. Successful exploitation of this vulnerability could result in code execution on the affected system...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMAFROMDEVICE. This flaw allows a local user to read...
CVE-2022-22396
Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credentials could be the remote vSnap, offload targets, or VADP credentials depending on the operation performed. Credentials that are using API key or certificate are...
Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway and VPN module have multiple vulnerabilities (CVE-2021-22060, CVE-2022-22950, CVE-2022-0547, CVE-2022-0778, CVE-2022-22965)
Summary Vulnerabilities contained within 3rd party components were identified and remediated in the IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway and MaaS360 VPN module. Vulnerability Details CVEID: CVE-2021-22060 DESCRIPTION: VMware Tanzu Spring Framework could allow a remote...
VMware Cloud Foundation Web Detection
Binary data vmwarecloudfoundationwebdetect.nbin...
Exploit for Incorrect Authorization in Vmware Spring_Security
CVE 2022-22978: Authorization Bypass in RegexRequestMatcher...
Exploit for Server-Side Request Forgery in Vmware Workspace_One_Uem_Console
CVE-2021-22054 Generate SSRF payloads References https:/...