CVE-2022-1388-F5-BIG-IP

CVE-2022-1388-F5-BIG-IP ضع target.txt في نفس الدليل ثم نفّذ مباشرة...

CLEANSTART-2026-OX66799 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...

CVE-2026-39826 affects multiple packages. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block. See references for individual...

PT-2026-107976

ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...

Wireshark 1.4.x < 1.4.9 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.9 advisory. - Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service application crash via...

EUVD-2026-92633

Ghost : Stored XSS via SVG Files in Content Imports...

defender

🛡️ لينكس-دييفيندر.ش 📝 جدول المحتويات 📌 نظرة عامة 🚀 الميزات 🐧 التوزيعات المدعومة 📦 الأدوات المثبتة ⚙️ التثبيت البناء من المصدر عام 📦 تثبيت الحزمة حزمة دبيان .deb حزمة آرتش لينكس 🧰 تشغيل المدافع 🧾 الترخيص 🙋‍♂️ المؤلف ☕ الدعم والمساهمة 📌 نظرة عامة لينكس ديفيندر هو سكربت باش قوي وسهل الاستخدام مصمم...

EUVD-2026-92756

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization...

GHSA-8575-CR6V-7JH4 Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

EUVD-2026-92770

Ghost: Stored XSS via File Uploads on Local Storage...

CVE-2026-106575

A flaw was found in ImageMagick. An attacker could provide a specially crafted Magick script that fails to release opened file pointers during execution. Repeated processing of such scripts can exhaust available file descriptors system resources used to manage open files, resulting in a Denial of...

wp-CVE-2017-5487-exploit

वर्डप्रेस CVE-2017-5487 पायथन में शोषण उपयोग के उदाहरण: python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...

CVE-2018-1049-POC

यह Python स्क्रिप्ट CVE-2018-1049 के लिए Metasploit मॉड्यूल एक्सप्लॉइट का एक कस्टम पुनः कार्यान्वयन है, जो sudo के माध्यम से दुरुपयोग की गई एक Perl स्क्रिप्ट में विशेषाधिकार वृद्धि भेद्यता के माध्यम से VyOS Vyatta को लक्षित करता है। आपको वैध SSH क्रेडेंशियल्स की आवश्यकता है। आप sudo-अनुमत स्क्रिप...

CVE-2025-66177

⚠️ अस्वीकरण / दायित्व-मुक्ति स्पेनिश में: यह कोड और संबंधित सामग्री केवल शैक्षिक उद्देश्यों, सुरक्षा अनुसंधान और वैध, अधिकृत पेनिट्रेशन परीक्षण के लिए प्रदान की जाती है। सिस्टम स्वामी की पूर्व और स्पष्ट लिखित सहमति के बिना लक्ष्यों के विरुद्ध इस स्क्रिप्ट का उपयोग करना अवैध है और सख्ती से...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

DEBIAN-CVE-2026-106575

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2026-106575

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

GHSA-R5MF-4R5X-Q78F Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable

Summary The error page that Quasar CLI shows when an SSR or SSG render throws in development serializes every variable in process.env, every request header and every cookie into the HTTP response, and the dev server binds 0.0.0.0 by default. Any host that can reach the port therefore gets the...

CVE-2025-24367-Cacti-Exploit

CVE-2025-24367-WebShell Exploit لقد أنشأت هذا النص البرمجي الصغير لـ CVE-2025-24367 - من Cacti، وهو نص برمجي مصمم للحصول على webshell بفضل الثغرة في Cacti في الإصدار 1.2.28. استخدام النص البرمجي: python CVE-2025-24367-Exploit.py --url "http://webEjemplo.htb/cacti/" --user "usuario" --password...

CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...