bug-bounty-tools

Bug Bounty Script Un script BASH pour automatiser l'installation des outils de bug bounty les plus populaires. L'objectif principal de ce script est de l'exécuter sur des machines virtuelles temporaires/jetables dans le cloud. Outils utilisés Nuclei httpx Naabu Subfinder DNSx Nmap Katana Recox...

IPConfigure Orchid Core VMS 2.0.5 - Local File Inclusion

IPConfigure Orchid Core VMS 2.0.5 is susceptible to local file inclusion. id: CVE-2018-10956 info: name: IPConfigure Orchid Core VMS 2.0.5 - Local File Inclusion author: 0xAkoko severity: high description: | IPConfigure Orchid Core VMS 2.0.5 is susceptible to local file inclusion. impact: | An...

ehicle Service Management System 1.0 - Cross-Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Category List section in login panel. id: CVE-2021-46071 info: name: ehicle Service Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Vehicle Service...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Mechanic List section in login panel. id: CVE-2021-46069 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servi...

Vehicle Service Management System 1.0 - Cross Site Scripting

Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability via the User List section in login panel. id: CVE-2021-46073 info: name: Vehicle Service Management System 1.0 - Cross Site Scripting author: TenBird severity: medium description: | Vehicle Service Management Syst...

Vehicle Service Management System 1.0 - Stored Cross Site Scripting

Vehicle Service Management System 1.0 contains a stored cross-site scripting vulnerability via the Service List section in login panel. id: CVE-2021-46072 info: name: Vehicle Service Management System 1.0 - Stored Cross Site Scripting author: TenBird severity: medium description: | Vehicle Servic...

SecGen

LE DÉVELOPPEMENT A ÉTÉ DÉPLACÉ VERS http://github.com/cliffe/SecGen/, CE DÉPÔT N'EST PLUS MAINTENU ET NE FONCTIONNERA PROBABLEMENT PAS ! Générateur de scénarios de sécurité SecGen Résumé SecGen crée des machines virtuelles vulnérables pour que les élèves puissent apprendre les techniques de test ...

CVE-2021-42261

CVE-2021-42261 建议描述 Revisor 视频管理系统（VMS）2.0.0 之前版本存在目录遍历漏洞。成功利用该漏洞可使攻击者遍历文件系统，访问远程服务器上受限目录之外的文件或目录，从而导致易受攻击服务器上的敏感数据泄露。 漏洞类型 目录遍历 供应商产品 Revisor Lab 受影响产品代码库 Revisor VMS 2.0.0 受影响组件 Web 服务器 攻击类型 远程 供应商是否已确认或承认该漏洞？ true 影响信息披露 true 参考 https://revisorlab.com/ 发现者 Vladimir Rotanov（Jet Infosystems...

CVE-2022-25477

CVE-2022-25477 ⚡ सरल उपयोग इस प्रोजेक्ट का उपयोग केवल सुरक्षित और अधिकृत वातावरणों में करें जैसे: स्थानीय वर्चुअल मशीनें डॉकर कंटेनर पृथक प्रयोगशाला सेटअप अधिकृत पेनिट्रेशन टेस्टिंग वातावरण उदाहरण सेटअप: root@kitploit: git clone cd Project use python follow below Create a virtual environment pyth...

bromure

Bromure Calcolo sicuro ed effimero in VM Linux usa e getta su macOS. → Dettagli completi, screenshot e download su bromure.io Questo repository contiene due app gemelle, entrambe costruite su Virtualization.framework di Apple: Bromure — ogni sessione del browser viene eseguita in una VM Linux usa...

SecGen

Security Scenario Generator SecGen Zusammenfassung SecGen erstellt verletzliche virtuelle Maschinen, Laborumgebungen und Hacking-Challenges, damit Studenten Techniken des Penetrationstests erlernen können. Boxen wie Metasploitable2 sind immer gleich. Dieses Projekt verwendet Vagrant, Puppet und...

CVE-2021-38647

CVE-2021-38647 CVE-2021-38647 – POC zur Ausnutzung von nicht authentifiziertem RCE OMIGOD auf Azure UNIX/Linux-VMs! Details In Microsofts Azure wird die OMI-Anwendung automatisch installiert, wenn Dienste wie Azure Automation Accounts, Update Management, Log Analytics, Configuration Management us...

omigood

omigood OM I GOOD? Questo repository contiene uno scanner gratuito per rilevare VM vulnerabili a una delle vulnerabilità "OMIGOD" scoperte dal team di threat research di Wiz, in particolare CVE-2021-38647. Post originale del blog di Wiz:...

CVE-2026-78414

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-78414

A cross-site scripting (XSS) vulnerability exists in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 (Linux, Windows, macOS). An adjacent-network attacker who controls a rogue Nx server on the same network segment can set that server's site name to a script p...

CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

EUVD-2026-64898

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

PT-2026-80899

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

EUVD-2026-63466

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-77020

CodeAstro Apartment Visitor Management System 1.0 is vulnerable to SQL injection via the email argument in password-recovery.php. Exploitation requires no authentication and is possible over the network; a proof-of-concept exploit is publicly available. No patch version or vendor fix is provided ...