flare-vm

FLARE-VM Bienvenido a FLARE-VM, una colección de scripts de instalación de software para sistemas Windows que te permite configurar y mantener fácilmente un entorno de ingeniería inversa en una máquina virtual VM. FLARE-VM fue diseñado para resolver el problema de la curación de herramientas de...

PMD

Practical Malware Development Exercise 1 - Environment Setup 1. Get a Windows virtual machine setup within a hypervisor. a. Make sure to take a snapshot of your base installation. 2. Download and install Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. Select Desktop development wit...

denkair-lab

DenkAir - Windows AD Pentesting Lab A comprehensive Windows A...

CVE-2026-21986

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2025-62376

The CVE-2025-62376 issue affects the pwn.college DOJO platform’s /workspace endpoint. The view_desktop flow retrieves the user via a URL parameter without confirming administrative privileges, enabling an attacker to specify any user ID and an arbitrary password to impersonate that user. When req...

CVE-2025-62376: Improper Authentication

pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The...

CVE-2025-49692

Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2020-14628

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

PT-2024-8084 · Microsoft · Windows Vmswitch +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows VMSwitch affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can allow an attacker to elevate their privileges. This can affect the system, potentially allowi...

XenServer VM Tools

Introduction Instances where XenServer encounters various errors while installing XenServer VM tools Overview of the Issue In different situations, XenServer has some issues when installing VM tools, possibly due to various factors. This article will outline different scenarios and potential...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in N-Able Take_Control

CVE-2023-27470 EoP via Arbirary File Deletion Exercise This r...

Rocky Linux and virt-devel:Rocky Linux bug fix and enhancement update

An update is available for sgabios, module.hivex, module.libvirt, module.virt-v2v, hivex, perl-Sys-Virt, module.libguestfs, module.nbdkit, netcf, swtpm, module.qemu-kvm, module.seabios, module.libvirt-python, virt-v2v, libtpms, module.supermin, libvirt-dbus, qemu-kvm, supermin, module.libvirt-dbu...

BlueCloud - Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D

Cyber Range deployment of HELK and Velociraptor! Automated terraform deployment of one system running HELK + Velociraptor server with one registered Windows endpoint in Azure or AWS. A collection of Terraform and Ansible scripts that automatically and quickly deploys a small HELK + Velociraptor R...

[SECURITY] Fedora 34 Update: hivex-1.3.20-1.fc34

Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' in perl-hivex lets you export and merge to...

Oracle VM VirtualBox (Jul 2020 CPU)

The Prior to 5.2.44, prior to 6.0.24, and prior to 6.1.12 versions of VM VirtualBox installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2020 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core...

CVE-2020-14628

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-14628

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-14628

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-14628

CVE-2020-14628 affects Oracle VM VirtualBox (Core) across several supported branches. Vulnerable versions are Windows VirtualBox prior to 5.2.44, prior to 6.0.24, and prior to 6.1.12. The issue is exploitable by a high-privilege attacker with local logon to the host running VirtualBox, with the p...

CVE-2020-14628

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...