FortiWeb-CVE-2025-52970-Authentication-Bypass

🚨 تجاوز المصادقة في FortiWeb → تنفيذ الأوامر عن بُعد 📌 نظرة عامة يوضح هذا المستودع تجاوز المصادقة في FortiWeb والذي يمكن ربطه لتحقيق تنفيذ الأوامر عن بُعد RCE. يستغل الثغرة نقطة نهاية ضعيفة لحقن حمولات SQL، تحميل ويب شيل، وتنفيذ الأوامر عبر رؤوس HTTP. ⚠️ إخلاء مسؤولية : هذا المشروع لأغراض تعليمية...

Exploit for CVE-2026-105314

Papermerge-core: Authenticated Path Traversal to Arbitrary Fil...

CyberStrikeAI

CyberStrikeAI 中文 | English Le système d'action pour la cybersécurité native à l'IA — où l'intention devient une exécution gouvernée, les preuves deviennent une mémoire opérationnelle, et chaque opération améliore la suivante. CyberStrikeAI relie la planification, l'exécution, la supervision...

wp2shell

CVE-2026-63030 + CVE-2026-60137 - "wp2shell": RCE غير مصادق عليه في نواة ووردبريس ارتباك مسار REST API CVE-2026-63030 متسلسل مع حقن SQL فيWPQuery authornotin CVE-2026-60137 → تنفيذ كود عن بُعد بدون مصادقة مسبقة على تثبيت ووردبريس افتراضي. مكتشف من قبل Adam Kues Assetnote / Searchlight Cyber، تم...

Exploit for CVE-2026-105134

CVE-2026-105134-style OS Command Injection Lab A minimal, sel...

Apache-APISIX-CVE-2022-24112

Exploit d'exécution de code à distance d'Apache APISIX CVE-2022-24112 Résumé Un attaquant peut abuser du plugin batch-requests pour envoyer des requêtes à contourner la restriction d'IP de l'API Admin. Une configuration par défaut d'Apache APISIX avec la clé API par défaut est vulnérable à...

CVE-2023-48084

CVE-2023-48084 يُصحّح بناء الجملة المعطوب في الـ POC، وبشكل أساسي الاستيراد غير الصحيح والإحالة غير الصحيحة إلى دوال الـ API. يؤتمت استرجاع الـ APIToken، ويخزّن الرمز المميز كمتغير ويوجّهه إلى الـ POC المُصحَّح. https://github.com/Hamibubu/CVE-2023-48084 إذا لم يعمل هذا لسبب ما، فافحص الفروقات di...

CVE-2022-22947-

CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL expression injection command execution（CVE-2022-22947） Inject Godzilla memory shell Default key pass base64 Note: the code does not clear the route part, please clear it yourself.. Test environment:...

FOSKiller

███████╗ ██████╗ ███████╗██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██╔════╝██╔═══██╗██╔════╝██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ █████╗ ██║ ██║███████╗█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██╔══╝ ██║ ██║╚════██║██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗ ██║ ╚██████╔╝███████║██║ ██╗██║███████╗███████╗███████╗██║ ██║...

CVE-2026-105307

A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authzfilter.go of the component API Endpoint. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used...

Improper Privilege Management

Apache Syncope is vulnerable to Improper Privilege Management. The vulnerability is due to insufficient authorization checks in certain user workflow configurations, which allows an authenticated user to grant themselves defined Roles through a REST API and gain their associated entitlements,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: tun: Unlinking the NAPI from the device upon destruction. Syzbot identified a race condition between the tun file and the device destruction process. NAPIs reside in the structtunfile structure, and this structure may be...

Astra Linux – Vulnerability in docker.io-app

BuildKit is a toolkit for converting source code into build artifacts in an efficient, expressive, and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Networking. The supported versions affected by this vulnerability include Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the SanitizerAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.72, using the "after free" mechanism in the Network API of Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted Chrome Extension...

CVE-2026-5027

Ce post est un article de recherche publié par EQSTLab. Merci àYahia Hamza, qui a signalé et analysé cette vulnérabilité. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Vulnérabilité d'écriture arbitraire de fichiers dans Langflow...

ai-kubernetes-helm-chart-security

IA sur Kubernetes : valeurs par défaut de sécurité des charts Helm preuves Ce dépôt contient les données et les preuves à l'appui du rapport technique Sorami « IA sur Kubernetes : 10 des 14 charts Helm sont livrés sans authentification d'API » version 1.2. Lire le rapport ici :...

CVE-2026-105307 Casdoor API Endpoint authz_filter.go ApiFilter missing authentication

A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authzfilter.go of the component API Endpoint. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used...

CVE-2026-105307

A vulnerability exists in Casdoor up to version 3.161.1 involving the API Endpoint component. The issue resides in the ApiFilter function located within the routers/authz_filter.go file, where a manipulation can lead to missing authentication . This flaw allows for remote attacks. While an exploi...