CVE-2022-25477

CVE-2022-25477 ⚡ Utilizzo Semplice Usa questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Container Docker Setup di laboratorio isolati Ambienti di penetration testing autorizzati Esempio di setup: root@kitploit: git clone cd Project use python follow below Crea...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Mechanic List section in login panel. id: CVE-2021-46069 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servi...

ehicle Service Management System 1.0 - Cross-Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Service List section in login panel. id: CVE-2021-46072 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servic...

Vehicle Service Management System 1.0 - Cross Site Scripting

Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel. id: CVE-2021-46073 info: name: Vehicle Service Management System 1.0 - Cross Site Scripting author: TenBird severity: medium description: | Vehicle Service Management Syst...

bug-bounty-tools

Bug-Bounty-Skript Ein BASH-Skript zur Automatisierung der Installation der beliebtesten Bug-Bounty-Tools; der Hauptzweck dieses Skripts besteht darin, es auf temporären/wegwerfbaren virtuellen Maschinen in der Cloud auszuführen. Verwendete Tools Nuclei httpx Naabu Subfinder DNSx Nmap Katana Recox...

IPConfigure Orchid Core VMS 2.0.5 - Local File Inclusion

IPConfigure Orchid Core VMS 2.0.5 is susceptible to local file inclusion. id: CVE-2018-10956 info: name: IPConfigure Orchid Core VMS 2.0.5 - Local File Inclusion author: 0xAkoko severity: high description: | IPConfigure Orchid Core VMS 2.0.5 is susceptible to local file inclusion. impact: | An...

CVE-2021-42261

CVE-2021-42261 सुझाए गए विवरण Revisor Video Management System VMS 2.0.0 से पहले के संस्करण में एक डायरेक्टरी ट्रैवर्सल कमजोरी है। इसका सफल शोषण एक हमलावर को फाइल सिस्टम में घूमने और रिमोट सर्वर पर प्रतिबंधित निर्देशिका के बाहर की फाइलों या निर्देशिकाओं तक पहुँचने की अनुमति दे सकता है। इससे...

SecGen

LE DÉVELOPPEMENT A ÉTÉ DÉPLACÉ VERS http://github.com/cliffe/SecGen/, CE DÉPÔT N'EST PLUS MAINTENU ET NE FONCTIONNERA PROBABLEMENT PAS ! Générateur de scénarios de sécurité SecGen Résumé SecGen crée des machines virtuelles vulnérables pour que les élèves puissent apprendre les techniques de test ...

bromure

Bromure Calcolo sicuro ed effimero in VM Linux usa e getta su macOS. → Dettagli completi, screenshot e download su bromure.io Questo repository contiene due app gemelle, entrambe costruite su Virtualization.framework di Apple: Bromure — ogni sessione del browser viene eseguita in una VM Linux usa...

SecGen

Security Scenario Generator SecGen Zusammenfassung SecGen erstellt verletzliche virtuelle Maschinen, Laborumgebungen und Hacking-Challenges, damit Studenten Techniken des Penetrationstests erlernen können. Boxen wie Metasploitable2 sind immer gleich. Dieses Projekt verwendet Vagrant, Puppet und...

CVE-2021-38647

CVE-2021-38647 CVE-2021-38647 – POC zur Ausnutzung von nicht authentifiziertem RCE OMIGOD auf Azure UNIX/Linux-VMs! Details In Microsofts Azure wird die OMI-Anwendung automatisch installiert, wenn Dienste wie Azure Automation Accounts, Update Management, Log Analytics, Configuration Management us...

omigood

omigood OM I GOOD? Questo repository contiene uno scanner gratuito per rilevare VM vulnerabili a una delle vulnerabilità "OMIGOD" scoperte dal team di threat research di Wiz, in particolare CVE-2021-38647. Post originale del blog di Wiz:...

CVE-2026-78414

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-78414

A cross-site scripting (XSS) vulnerability exists in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 (Linux, Windows, macOS). An adjacent-network attacker who controls a rogue Nx server on the same network segment can set that server's site name to a script p...

EUVD-2026-64898

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

PT-2026-80899

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

EUVD-2026-63466

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-77020

CodeAstro Apartment Visitor Management System 1.0 is vulnerable to SQL injection via the email argument in password-recovery.php. Exploitation requires no authentication and is possible over the network; a proof-of-concept exploit is publicly available. No patch version or vendor fix is provided ...