Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

CVE-2022-26810

استغلال CVE-2022-26809 RCE وصف CVE CVE-2022-26809 - ثغرة في مكوّن أساسي من مكونات Windows RPC حصلت على درجة CVSS بلغت 9.8 وليس من دون سبب؛ فالهجوم لا يتطلب مصادقة ويمكن تنفيذه عن بُعد عبر الشبكة، ويمكن أن يؤدي إلى تنفيذ الأوامر عن بُعد RCE بصلاحيات خدمة RPC، والتي تعتمد على العملية التي تستضيف بي...

CVE-2023-23388

يحتوي هذا المستودع على PoC لـ CVE-2023-23388، وهو موصوف في هذه السلسلة، وتحديدًا في هذه التدوينة. إنها ثغرة LPE في خدمة البلوتوث المعروفة أيضًا باسم bthserv في Windows 10/11 تسمح لمستخدم غير مميز بتصعيد صلاحياته إلى LOCAL SERVICE. لا يحتوي هذا المستودع على استغلال، بل مجرد PoC. البناء، التشغيل،...

CVE-2017-11610

سكربت ثغرة تنفيذ الأوامر عن بُعد في Supervisord CVE-2017-11610 مقدمة عن الثغرة Supervisor هي أداة لإدارة العمليات مكتوبة بلغة Python، ويمكن استخدامها بسهولة في الأنظمة الشبيهة بـ UNIX لا تدعم Windows لبدء العمليات وليس فقط عمليات Python وإعادة تشغيلها إعادة التشغيل التلقائي للبرامج وإيقافها...

Microsoft-CVE-2022-26809-The-Little-Boy

Microsoft-CVE-2022-26809-aka The Little Boy - POC سيتم تحديث الـ poc لثغرة CVE-2022-26809 RCE عبر RPC هنا. نحن بصدد تحديد الكود المعرض للخطر وسنشارك أبسط RCE بنقرة واحدة هنا...

PoC-CVE-2022-26809

PoC-CVE-2022-26809 PoC لـ CVE-2022-26809، التحليل والاعتبارات موضحة في github.io. تمت كتابة الـ PoC عن طريق تجاوز دوال Impacket. تم الاختبار باستخدام: impacket الإصدار 0.10.0 لم يتم اختبار الـ PoC بالكامل، لأنه من المفترض أن يثير الثغرة الأمنية، أي تجاوز العدد الصحيح integer overflow، الذي يؤدي إ...

CVE-2020-1472

سكربت اختبار ZeroLogon سكربت بلغة Python يستخدم مكتبة Impacket لاختبار الثغرة الأمنية لاستغلال Zerologon CVE-2020-1472. يحاول تنفيذ تجاوز مصادقة Netlogon. سينهي السكربت تنفيذه فورًا عند نجاح عملية التجاوز، ولن ينفذ أي عمليات Netlogon. عندما تكون وحدة تحكم المجال محدّثة بالإصلاح، سيستسلم سكربت الك...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...

FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway

A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHEL 9 : opentelemetry-collector (RHSA-2026:76744)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:76744 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: google.golang.org/grpc: gRPC-Go: Denial of Service via...

RHEL 9 : freerdp (RHSA-2026:76755)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76755 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

RockyLinux 9 : freerdp (RLSA-2026:76755)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:76755 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in...

Rocky Linux 10.2 [CIQ] Security Update: opentelemetry-collector (crlsa-2026_76743)

The Rocky Linux 10.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202676743 advisory. google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-84445 Tenable has extracted the preceding description block directly from...

RockyLinux 9 : opentelemetry-collector (RLSA-2026:76744)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:76744 advisory. google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-84445 Tenable has extracted the preceding description block directly from...

RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS

Summary com.rabbitmq.tools.json.JSONReader.read never returns when its input ends inside a quoted string or a // line comment. Both scanners walk the input with StringCharacterIterator.next but only compare against a delimiter, so once the iterator reaches CharacterIterator.DONE ￿ they loop...

EUVD-2026-93773

RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS...

RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

Summary A single AMQP message with malformed UTF-8 in a shortstr property for example correlation-id can permanently disable a Java client RPC consumer. The client decodes malformed bytes into U+FFFD replacement characters. Each of those re-encodes to 3 bytes, so a 255-byte property becomes 765...

GHSA-7822-RCF6-97FX RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

Summary A single AMQP message with malformed UTF-8 in a shortstr property for example correlation-id can permanently disable a Java client RPC consumer. The client decodes malformed bytes into U+FFFD replacement characters. Each of those re-encodes to 3 bytes, so a 255-byte property becomes 765...