380963 matches found
CVE-2026-17566
CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC PoC لتنفيذ التعليمات البرمجية عن بُعد في أداة Import/Export Data لـ pgAdmin 4. يستغل التباين في دلالات تهريب الشرطة المائلة العكسية بين مدقق الأقواس isqueryparensbalanced وpsql، لحقن \copy ... TO PROGRAM وتنفيذ أوامر عشوائية على الخادم الذي...
CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component
CVE-2026-22010 – إعادة توجيه Intent في Android إلى مكوّن مُصدَّر برنامج توضيحي محاكاة Java/Android // VulnActivity.java - Exported activity that forwards intents public class VulnActivity extends Activity @Override protected void onCreateBundle b super.onCreateb; Intent incoming = getIntent; //...
Antignis
Antignis , , . . '..' / \ / ||| || '-, ,-' / /\ \ / \ \ |/ \ / | |/ / '. .:. .' / | \ | \ | | / // | \ |\ \ '|Y|' | /| /| |\ /|| // , \ / , / / // / / ,- I -, | /=\ | ,-' |=| '-, - / رابط مقالة المدونة:...
QuickBox-Pro-2.1.8-Authenticated-RCE
QuickBox-Pro-2.1.8-Authenticated-RCE يمكن لمستخدم مصادَق بصلاحيات منخفضة استغلال ثغرة حقن أوامر Command Injection للحصول على تنفيذ كود بصلاحيات www-data وتصعيد الصلاحيات إلى root بسبب قواعد sudo ضعيفة. الإصدار QuickBox Pro v2.1.8 والإصدارات الأقدم منه معرّضة للخطر...
kernel: vsock/virtio: fix zerocopy completion for multi-skb sends
A flaw was found in the Linux kernel's vsock/virtio component. This vulnerability occurs during zerocopy completion for large messages fragmented into multiple socket kernel buffers skbs. An issue in how user arguments uargs are handled for these buffers can lead to pinned user pages not being...
NGINX_2026_CVE_Bundle_CTI_Report
🛡️ تحقيق CTI متعدد الثغرات لـ NGINX 2026 CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 أُنشئ بواسطة Pratik Chhetri تاريخ التقرير: 2026-07-28 📌 الملخص التنفيذي CVE| المكوّن| المشكلة الأساسية| إصدارات المصدر المفتوح المُصلحة| الأولوية ---|---|---|---|---...
hassh
"HASSH" - une méthode de profilage des clients et serveurs SSH. NOTE : Ce dépôt Corelight a été créé afin qu'il puisse être activement maintenu, à la demande de Salesforce, dont le dépôt d'origine n'est plus maintenu. "HASSH" est un standard d'empreinte réseau qui peut être utilisé pour identifie...
kyocera-cve-2022-1026_SOAP1.1
Kyocera cve-2022-1026 soap1.1 للاستخدام في الاختبارات المصرَّح بها فقط. هذا المشروع مُقدَّم لأغراض تعليمية وللتحقق الدفاعي في البيئات التي تملكها أو لديك إذن صريح لاختبارها. لا تستخدمه ضد أنظمة لا تملكها أو لا تديرها. أداة للتحقق من التعرض لثغرة طابعات Kyocera واسترجاع البيانات، وهي إثبات مفهوم...
kernel: vsock/virtio: fix zerocopy completion for multi-skb sends
A flaw was found in the Linux kernel's vsock/virtio component. This vulnerability occurs during zerocopy completion for large messages fragmented into multiple socket kernel buffers skbs. An issue in how user arguments uargs are handled for these buffers can lead to pinned user pages not being...
Security Bulletin: Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection (CVE-2026-84891)
Summary Security vulnerability has been addressed in the Windows GIM component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-84891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of hard-coded...
Security Bulletin: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
Summary Multiple vulnerabilities have been addressed in the Sniffer component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-75875 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal. CWE:CWE-22:...
Important: Red Hat Security Advisory: postgresql:12 security update
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...
Security Bulletin: Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection (CVE-2026-87980)
Summary Security vulnerability has been addressed in the UNIX S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-87980 DESCRIPTION: IBM Guardium Data Protection could allow a local attacker to obtain sensitive information due to cleartext storage of...
Important: Red Hat Security Advisory: postgresql:12 security update
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...
Security Bulletin: Multiple vulnerabilities affect the Windows S-TAP component as part of IBM Guardium Data Protection (CVE-2026-82344, CVE-2026-82334)
Summary Multiple vulnerabilities have been addressed in the Windows S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-82344 DESCRIPTION: IBM Security Guardium is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly...
CVE-2026-90817
CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE أداة فحص بلغة Python 3 وخطاف استغلال قابل للتكوين لـ CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- المنتج| REDCap Vanderbilt المتأثر| ≥ 13.3.0 حتى تصحيح الفرع المُصحَّح| 16.0.49 LTS، 17.3.10 LTS، 17.4.4 Standard+ CVSS 3.1| 9.8 حرج...
CVE-2026-107660
FFmpeg versions prior to 8.1.3 and 9.x before 9.0.2 are vulnerable to an improper certificate validation flaw in the tls_open() function within libavformat/tls_mbedtls.c. The root cause is that the software skips hostname checks for hosts identified by IP addresses. This allows a network attacker...
Inject-PHP-to-JPG-Using-Jhead
Inject-PHP-to-JPG-Using-Jhead $ pkg install vim or apt-get install vim $ pkg install jhead or apt-get install jhead $ jhead -h للمساعدة $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg اضغط ESC واكتب :x للحفظ $ jhead yourfiles.jpg مثال : site.com/youfiles.php?cmd=Command Here...
CVE-2026-93034
SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads in maybeunwrappickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when...
DEBIAN-CVE-2026-107565
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...