autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

CVE-2024-31719----AMI-Aptio-5-Vulnerability

AMI-Aptio--NvLock-Vulnerability Information CVE ID: CVE-2024-31719 Link Vulnerability Type: Incorrect Access Control Vendoer of Product: American Megatrends International, LLC. Product: AMI Aptio - 5 Atack Type: Local Attack Vector The attacker can easily bypass the NvLock module's access...

sift

SIFT This is a metadata repository that is primarily used for discussiosn and issue tracking. cast -- installer cli saltstack -- states that actually do the work packer -- builds machine images using the above tools package-scripts -- builds certain packages hosted in SIFT PPA Supported Distros...

CVE-2026-0893

The AMI APTIOV BIOS contains a vulnerability where an attacker with local access can cause Exposure of Sensitive Information to an Unauthorized Actor . Successful exploitation may lead to information disclosure , privilege escalation , and further impacts on the Confidentiality, Integrity, and Av...

CVE-2025-58774

The AMI APTIOV BIOS contains vulnerabilities where local access can trigger a “Buffer Access with Incorrect Length Value” (CWE-805). Successful exploitation may lead to buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the Confidentiality, Integrity, and ...

CVE-2025-58773

The AMI APTIOV BIOS contains an Out-of-bounds Write vulnerability (CWE-787) reachable via local access. Successful exploitation can result in buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the Confidentiality, Integrity, and Availability of the system....

CVE-2025-58772

The AMI APTIOV BIOS contains vulnerabilities that allow local users to trigger a "Classic Buffer Overflow" (CWE-120). Successful exploitation of this flaw can result in buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the system's Confidentiality, Integr...

CVE-2025-58771

The AMI APTIOV BIOS contains vulnerabilities where local access can trigger an Integer Overflow or Wraparound (CWE-190). Successful exploitation may lead to buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the system's confidentiality, integrity, and ava...

htb-machine-ringdown

htb-machine-ringdown Detailed design & exploitation writeup for Ringdown—an original Debian/Asterisk vulnerable machine featuring CVE-2024-42365 AMI, PJSIP pre-hash cracking, and Fail2ban POSIX ACL privilege escalation...

CVE-2024-54085

CVE-2024-54085: Critical Authentication Bypass Vulnerability in AMI MegaRAC BMC Affected Systems The vulnerability affects a wide range of server hardware from major manufacturers: AMI MegaRAC SPx : versions 12.x up to 12.7 and 13.x up to 13.5 HPE Cray XD670 : versions 1.09, 1.13, 1.17 Asus...

aws-firmware-dump

aws-firmware-dump Acquire the disks of an AMI you can already launch into a private S3 bucket. No catalog, no product list, no baked-in AMI ids. You pass the AMI id. S3 is the store. Boot, snapshot, compress, and upload all run inside AWS. Local bandwidth is used only if you later pull a specific...

Amazon Linux AMI 2: CVE-2023-32803: Security patch for ca-certificates (Multiple Advisories)

The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 AL2 does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491...

CVE-2026-33197

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability...

EUVD-2026-72791

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability...

CVE-2026-33197 BDS Module Bypass Secure Boot Advisory

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability...

CVE-2026-33197 BDS Module Bypass Secure Boot Advisory

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability...

CVE-2026-33197

AMI APTIOV BIOS contains a vulnerability in the BDS Module (Secure Boot) where an incomplete list of disallowed inputs allows a privileged local user to bypass Secure Boot and achieve arbitrary code execution . The CVSS v4.0 score is 8.7 (HIGH) , with low attack complexity, high privileges requir...

PT-2026-87093

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability...