Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteteam. id: CVE-2022-31977 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to SQ...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=reports&date=. id: CVE-2022-31974 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to SQL Injectio...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleterequest. id: CVE-2022-31976 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Guinevere

Guinevere - Automated Security Assessment Reporting Tool This tool works with Gauntlet a private tool to automate assessment reporting. Main features include: Generate Assessment Report Export Assessment Generate Retest Report Generate Pentest Checklist Generate Assessment Report This option will...

CVE-2023-36874

CVE-2023-36874 For demonstration purposes only. Exploit works on vulnerable Windows clients/servers. Compile code and create c:\test\system32 directories. Place your wermgr.exe in that directory and run compiled PoC...

graphcat

graphcat.py Simple script to generate graphs and charts on hashcat and john potfile and ntds. Table of Content graphcat.py Table of Content Install Helper Usage Format Charts example Install git clone https://github.com/Orange-Cyberdefense/graphcat cd graphcat pip install . Helper $ graphcat.py -...

kraken

Kraken is a simple cross-platform Yara scanner that can be built for Windows, Mac, FreeBSD and Linux. It is primarily intended for incident response, research and ad-hoc detections not for endpoint protection. Following are the core features: Scan running executables and memory of running process...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

faraday_addon

About Faraday Addon is a simple addon for automate reporting vulnerabilities through the browsed to your own Faraday instance. Faraday Addon intercepts every single request from the browser, adding a functionality for accessing each one of them treating them as a vulnerability. In this way, a...

CVE-2026-97798

Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-83748

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

CVE-2026-83693

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

CVE-2026-83519

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

CVE-2026-97815

A heap-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high risk of impact on confidentiality, integrity, and...

EUVD-2026-100400

Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-97798

The Windows Error Reporting service is vulnerable to an argument injection vulnerability (CWE-88) caused by improper neutralization of argument delimiters in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation . The official fix is available via the prov...

CVE-2026-83840

A weak authentication vulnerability in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1390 . While the CVSS v3.1 score is 7.8 (High) , the documents do not provide specific software versions, root cause detail...

CVE-2026-83750

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Error Reporting , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-367 (TOCTOU) and CWE-122 (Heap-based Buffer Overflow). The impact includes high levels ...

CVE-2026-83747

An out-of-bounds read vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit information or patch versions are provided in the documents beyond the confirmation ...