writeups.xyz writeups.xyz / VMware

Title Vulnerabilities Programs Authors
CVE-2024-37079:
Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation
CVE-2023-20864: Remote Code Execution In VMware Aria Operations For Logs
Pre-Authenticated RCE In VMware VRealize Network Insight - CVE-2023-20887
Vulnerabilities in the TPM 2.0 reference implementation code
VMware Workspace One Access
Exploiting Parameter Pollution in Golang Web Apps
Eat What You Kill :: Pre-authenticated Remote Code Execution in VMWare NSX Manager
VMware vCenter Server Platform Services Controller Unsafe Deserialization vulnerability
You Have One New Appwntment: Exploiting iCalendar Properties in Enterprise Applications
IAM Whoever I Say IAM :: Infiltrating VMWare Workspace ONE Access Using a 0-Click Exploit
Dancing on the architecture of VMware Workspace ONE Access (ENG)
From Shared Dash to Root Bash :: Pre-Authenticated RCE in VMWare vRealize Operations Manager
CVE-2022-31660 and CVE-2022-31661 (FIXED): VMware Workspace ONE Access, Identity Manager, and vRealize Automation LPE
CVE-2022-22977: VMware Guest Authentication Service LPE (FIXED)
Encrypting our way to SSRF in VMWare Workspace One UEM (CVE-2021-22054)
CVE-2022-22948: Sensitive Information Disclosure in VMware vCenter
Catching bugs in VMware: Carbon Black Cloud Workload Appliance and vRealize Operations Manager
Hunting for bugs in VMware: View Planner and vRealize Business for Cloud
Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)
VMware vCenter earlier versions (7.0.2.00100) has unauthorized arbitrary file read + ssrf + xss vulnerability
vScalation (CVE-2021-22015)- Local Privilege Escalation in VMware vCenter
SD-PWN Part 4 — VMware VeloCloud — The Last Takeover
Local Privilege Escalation Vulnerability Discovered in VMware Fusion
VMware Workstation: Attack surface through Virtual Printer