CVE-2025-27136-XXE-LocalS3

CVE-2025-27136 XXE-LocalS3 إثبات المفهوم لـ CVE-2025-27136 XXE في Local-S3 └─$ python3 exploit.py http://$ip:8080 /etc/passwd + تم اكتشاف خدمة S3 + إنشاء الحاوية: xxe-32d14993 + استجابة الخادم: ac3aaf20-e59a-4705-9505-3ebb01db7fc1 + استرداد الملف باستخدام ?location + الرد:...

CVE-2026-98238

A flaw was found in the Linux kernel's t7xx Wireless Wide Area Network WWAN driver. This vulnerability allows an attacker to cause a Denial of Service DoS by sending malformed network packets. The driver fails to validate the network interface index in incoming packet headers before indexing an...

GetFGPP

GetFGPP Extrait les stratégies de mot de passe fines FGPP d'Active Directory via LDAP. Nécessite un accès en lecture au conteneur des paramètres de mot de passe — par défaut, seuls les administrateurs disposent de ce droit, mais il arrive que cela soit mal configuré. Installation pip3 install lda...

Poc_CVE-2025-68645

CVE-2025-68645 - ثغرة اجتياز المسار في Zimbra 📋 نظرة عامة CVE-2025-68645 هي ثغرة اجتياز المسار في Zimbra Collaboration Suite تسمح للمهاجمين غير المصادقين بقراءة ملفات عشوائية من نظام ملفات الخادم. النقطة النهائية المعرضة للخطر /h/printconversations?javax.servlet.include.servletpath= 🎯 التأثير...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

A flaw was found in the Linux kernel's nvmet subsystem. An unauthenticated remote attacker could exploit an out-of-bounds heap read vulnerability in the Discovery Get Log Page function. By sending a specially crafted request with a manipulated offset, an attacker could read sensitive kernel memor...

CVE-2025-2539

CVE-2025-2539 - WordPress File Away = 3.9.9.0.1 - قراءة ملفات تعسفية 🔥 ملخص الثغرة إضافة ووردبريس File Away بإصدار = 3.9.9.0.1 معرّضة لثغرة قراءة ملفات تعسفية دون مصادقة. وهذا يتيح للمهاجمين قراءة أي ملف على الخادم، مثل wp-config.php، عبر طلب مخصص لنقطة نهاية AJAX الخاصة بالإضافة. تنبع الثغرة من...

CVE-2026-98204

A flaw was found in the Linux kernel's Synaptics RMI4 SMBus driver. When chunking write requests across the System Management Bus SMBus, the driver miscalculates the remaining data length for the final block. A local user can exploit this issue to trigger an out-of-bounds read past the input...

DEBIAN-CVE-2026-98382

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices bpfoffloaddevmatch falls back to comparing offdev pointers after an exact netdev mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A...

AZL-106914 CVE-2026-98384 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

DEBIAN-CVE-2026-98384

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

CVE-2026-98382

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices bpfoffloaddevmatch falls back to comparing offdev pointers after an exact netdev mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A...

CVE-2026-98384

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-19571

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

kernel: nvmet-rdma: handle inline data with a nonzero offset

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...

directus-security

directus-security قم بتدقيق أي مثيل Directus بحثًا عن الإعدادات الخاطئة التي تؤدي فعليًا إلى تسريب البيانات — تعرّض القراءة لدور عام، تعداد المستخدمين، تسريب الإصدار/المخطط بدون مصادقة، الاستبطان GraphQL، و oracle تعداد الحقول عبر باراميتر search — و أثبت كل واحدة منها مباشرة باستكشاف مجهول. قوائ...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

إفصاح أمني: قراءة خارج الحدود في محلل MIME الخاص بـ facil.io تؤدي إلى انهيار الخادم معرّف CVE المعيّن CVE-2026-66729 المنتج: facil.io الإصدارات المتأثرة: facil.io = 0.6.0 جميع إصدارات 0.6.x، جميع إصدارات 0.7.x، master؛ تم تقديمه عند إضافة محلل MIME في الإصدار 0.6.0 المكوّن:...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: خدمة HTTP غير موثقة لـ ES File Explorer أداة بحث وتحليل فني مطبقة بشكل مستقل وموجهة للأمان لثغرة CVE-2019-6447 ، وهي خدمة HTTP غير موثقة تتعرض لها الإصدارات الضعيفة من ES File Explorer لنظام Android. بحث مرخص فقط. استخدم هذا المشروع فقط ضد الأجهزة التي تمتلكها أو لديك إذن صريح...