1801 matches found
autovpn
!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...
CVE-2024-31719----AMI-Aptio-5-Vulnerability
AMI-Aptio--NvLock-Vulnerability Информация CVE ID: CVE-2024-31719 Ссылка Тип уязвимости: Неправильный контроль доступа Производитель продукта: American Megatrends International, LLC. Продукт: AMI Aptio - 5 Тип атаки: Локальная Вектор атаки Злоумышленник может легко обойти защиту доступа модуля...
sift
SIFT Это мета-репозиторий, который в основном используется для обсуждений и отслеживания проблем. cast — CLI установщик saltstack — состояния, которые фактически выполняют работу packer — создаёт образы машин с помощью вышеуказанных инструментов package-scripts — собирает определённые пакеты,...
phishlulz
PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...
metasploitable3
Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...
CVE-2024-54085
CVE-2024-54085: Критическая уязвимость обхода аутентификации в AMI MegaRAC BMC Затронутые системы Уязвимость затрагивает широкий спектр серверного оборудования от крупных производителей: AMI MegaRAC SPx : версии 12.x до 12.7 и 13.x до 13.5 HPE Cray XD670 : версии 1.09, 1.13, 1.17 Asus...
htb-machine-ringdown
htb-machine-ringdown Ringdown—Debian/Asterisk 취약 머신에 대한 상세 설계 및 익스플로잇 라이트업으로, CVE-2024-42365AMI, PJSIP 사전 해시 크래킹, Fail2ban POSIX ACL 권한 상승을 다룹니다...
CVE-2026-73665 FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection
FreePBX is an open source IP PBX. Prior to 17.0.9, the UCP Node server on ports 8001 and 8003 uses io.usecheckAuth in node/lib/server.js, but Socket.IO version 4 applies that middleware only to the default namespace. An unauthenticated client can connect to custom namespaces that do not...
CVE-2026-73665
FreePBX UCP vulnerability affecting versions prior to 17.0.9. The UCP Node server (ports 8001/8003) uses io.use(checkAuth) but Socket.IO v4 applies that middleware only to the default namespace, allowing an unauthenticated client to reach custom namespaces. This can lead to crafted AMI actions th...
CVE-2026-46515
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.3, PERMREAD access was sufficient to call fmlistmanagers, fmlistpinsets, fmshowcontext, fmgetmcpconfig, fmbackupstatus, fmwhoscalling, fmrunsavedquery, and fmdiagnosetrunk, exposing AMI manager secrets, outbound dial PIN...
MAL-2026-6498 Malicious code in dttfdsdee (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae565bed85ec0db27f1ff658c7e9491591ce40edc56f423cd8b1122bc209c69c package.json declares a postinstall script that runs automatically on npm install. The script walks the entire filesystem with find to locate databas...
CVE-2023-25191
AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00...
CVE-2023-25192
AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00...
CVE-2021-31845
A buffer overflow vulnerability in McAfee Data Loss Prevention DLP Discover prior to 11.6.100 allows an attacker in the same network as the DLP Discover to execute arbitrary code through placing carefully constructed Ami Pro .sam files onto a machine and having DLP Discover scan it, leading to...
EUVD-2025-134860
Malicious code in aiboloa-mioipe-ami npm...
EUVD-2025-134512
Malicious code in kisut-afnig-ami npm...
Malicious code in kisut-afnig-ami (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a613ce089ffe69484a248e978643a1a0c5ac51e42748b488600817f14442d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134489
Malicious code in kisut-afunig-ami npm...
MAL-2025-179662 Malicious code in kisut-afunig-ami (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50907a2a55fa6aeb4b170254d61ae978fde35aa219206746672043d44afc35f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...