CVE-2025-68613_Scanner

Scanner Internet n8n CVE-2025-68613 Un outil GUI basé sur Tkinter pour découvrir les instances n8n publiquement exposées via Shodan et les tester contre l'exposition à CVE‑2025‑68613 sur une large plage de versions. Le scanner : Interroge Shodan avec plusieurs empreintes titre, marqueurs HTML,...

citrix-cve-2021-22941-lab

⚠️ إخلاء مسؤولية هذه محاكاة وهمية لثغرة CVE-2021-22941 لأغراض الاختبار. يقوم الخادم الوهمي بتكرار السلوك الضعيف الفعلي حيث يمكن الوصول إلى نقطة النهاية Upload.aspx بدون مصادقة ويعيد استجابات LocalFile GUID، كما هو موثق في مستودعات CVE الرسمية ومستودعات الاستغلال. لماذا محاكاة وهمية؟ Citrix...

hotpot

Hotpot 🍲 Authy / Google Authenticator لسطر الأوامر. Hotpot هي أداة سطر أوامر بسيطة وآمنة لإدارة رموز المصادقة الثنائية المستندة إلى TOTP. تقوم Hotpot بتخزين أسرار المصادقة الثنائية الخاصة بك بشكل آمن في سلسلة المفاتيح الخاصة بالنظام، وتقوم بإنشاء كلمات مرور لمرة واحدة تعتمد على الوقت عندما تحتاج...

CVE-2026-103309 GPTranslate < 2.34.14 - Unauthenticated Stored XSS via REST API Translation Storage

The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store translations, and does not escape them when outputting them in translated pages, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks when server-side translations are enabled...

CVE-2026-103309

The GPTranslate WordPress plugin (versions prior to 2.34.14 ) contains an unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the plugin's failure to properly restrict who can store translations and its failure to escape those translations when displayed on translat...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

CVE-2026-87660

An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. The flaw occurs because the service fails to verify the identity or authenticity of the sending process when processing local inter-process communication (...

bd-alaris-firmware-analysis

تحليل أمان البرامج الثابتة لجهاز BD Alaris 8015 تحليل أمان البرامج الثابتة لوحدة PC لجهاز BD Alaris 8015: تخزين غير مشفر لبيانات اعتماد Wi-Fi ونقاط الضعف المركبة CVE-2016-9355 -orange نظرة عامة يقدم هذا المشروع تحليلاً أمنياً للبرامج الثابتة لمضخة التسريب BD Alaris 8015 Point-of-Care PC، مع الترك...

CVE-2026-105816

A flaw was found in Vault. This vulnerability allows a privileged operator to achieve arbitrary code execution on the underlying host system. Vault does not consistently verify that stored plugin catalog entries reference binaries located within the designated plugin directory. In configurations...

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

EUVD-2026-94683

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

CVE-2026-94580

A path traversal vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 10.0.1 , specifically within the component handling USB storage operations . An authenticated user with USB management privileges can manipulate requested target paths to bypass intende...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

Zabbix - SAML SSO Authentication Bypass

When SAML SSO authentication is enabled non-default, session data can be modified by a malicious actor because a user login stored in the session was not verified. id: CVE-2022-23131 info: name: Zabbix - SAML SSO Authentication Bypass author: For3stCo1d,spac3wh1te severity: critical description:...

EUVD-2026-94646

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

PT-2026-107800

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...