Reposted by @kalimer0x00.bsky.socialSynacktiv @synacktiv.com · 13/06/2025Our ninja @kalimer0x00.bsky.social is now on stage at #x33fcon to talk about his journey from dissecting SCCM until the discovery of the critical CVE-2024-43468 and the post-exploitation opportunities🔥 086
Reposted by @kalimer0x00.bsky.socialSynacktiv @synacktiv.com · 16/01/2025A few months ago, Microsoft released a critical patch for CVE-2024-43468, an unauthenticated SQL injection vulnerability in SCCM/ConfigMgr leading to remote code execution, discovered by @kalimer0x00.bsky.social. www.synacktiv.com/advisories/m...synacktiv.comMicrosoft Configuration Manager (ConfigMgr) 2403 Unauthenticated SQL injectionsMicrosoft Configuration Manager (ConfigMgr) 2403 Unauthenticated SQL injections 1118
