DraculaOS

Fichier OVA basé sur Kali Linux pour les enquêtes OSINT et la Cyber Intelligence. TÉLÉCHARGEMENT Le lien de téléchargement du fichier OVA DRACULA Os se trouve au lien suivant. Le fichier OVA DraculaOs pèse 8 Go. https://easyupload.io/o1y3jt...

sonicrack

Sonicrack Bishop Fox의 Team X가 개발했습니다. 설명 SonicOSX NSv 방화벽 펌웨어버전 7.1.1 이상를 복호화하는 도구입니다. 먼저 OVA 이미지에 대해 실행하여 키를 추출한 다음, SIG 이미지도 복호화할 수 있습니다. 펌웨어는 유효한 라이선스가 있으면 SonicWall 지원 사이트에서 얻을 수 있습니다. 키는 각 모델별로 고유한 것으로 보이므로, 이 도구는 VMware NSv 이미지에서만 작동합니다. 이론적으로 다른 모델의 키를 얻으면 다른 이미지도 복호화할 수 있을 것입니다. 이 도구는...

VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC

VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC Voici mon malware. J'utilise la CVE 2023-38831, une sorte d'exploit sur WinRAR, pour créer ce malware. J'utilise aussi BypassUAC pour obtenir les droits d'administrateur. Voici le fichier OVA correspondant:...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Testé sur VMware VCSA 6.7 créer une paire de clés ssh root@kitploit: ssh-keygen -t rsa -f vcsa.key -N '' créer une archive tar avec ../../../../../home/vsphere-ui/.ssh/authorizedkeys root@kitploit: python2 evilarc.py -d 5 -p 'home/vsphere-ui/.ssh' -o unix -f evil.tar...

GHSA-V5M8-5455-QW2X Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs

A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the /api/v1/sources/id/image-url endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs for Open Virtual Appliance OVA images...

CVE-2026-53470

A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the /api/v1/sources/id/image-url endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs for Open Virtual Appliance OVA images...

CVE-2026-53470 Migration-planner: getsourcedownloadurl missing organization check

A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the /api/v1/sources/id/image-url endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs for Open Virtual Appliance OVA images...

KubeV2V Migration assessment 授权问题漏洞

Migration assessment is an open-source tool developed by KubeV2V for evaluating and providing migration recommendations for VMware environments. There is a security vulnerability in Migration assessment. This vulnerability stems from the /api/v1/sources/id/image-url endpoint, where improper acces...

PT-2026-48444

Name of the Vulnerable Software and Affected Versions migration-planner affected versions not specified Description An improper access control flaw exists in the '/api/v1/sources/id/image-url' endpoint. An authenticated attacker can bypass ownership checks to obtain presigned S3 URLs for Open...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the /api/v1/sources/id/image-url endpoint, which fails to properly verify organizational ownership. An attacker can access and download OVA images containing sensitive data, such as...

CVE-2025-67305

In RUCKUS Network Director RND 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an attacker with network access to authenticate via SSH without a password. Once authenticated, the attacker can access the...

PT-2026-20926

Name of the Vulnerable Software and Affected Versions RUCKUS Network Director versions prior to 4.5.0.56 Description RUCKUS Network Director RND OVA appliances include hardcoded SSH keys for the postgres user. These keys are consistent across all deployments. An attacker with network access can u...

Rocky Linux Updates applied to SANnav (CVE-2024-3661, CVE-2024-11187, CVE-2024-12797)

Rocky Linux OS updates RSLA-2025:0377, RSLA-2025:1681, RLSA-2025:1330 applied to Brocade SANnav OVA OS CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic CVE-2024-11187 It is possible to construct a zone such that some queries to it will generate respons...

CVE-2019-16406

Centreon Web 19.04.4 has weak permissions within the OVA aka VMware virtual machine and OVF aka VirtualBox virtual machine files, allowing attackers to gain privileges via a Trojan horse Centreon-autodisco executable file that is launched by cron...

WordPress Ova Advent plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Ova Advent plugin, which stems from insufficient input cleanup and output escaping, and can be exploited by an...

CVE-2025-8561

The Ova Advent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

EUVD-2025-34511

The Ova Advent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

CVE-2025-8561

The Ova Advent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

CVE-2025-8561

CVE-2025-8561 affects the WordPress Ova Advent plugin (versions

CVE-2025-8561 Ova Advent <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Ova Advent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...