CVE-2026-84639

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84639

CVE-2026-84639 affects Mozilla Thunderbird 's MIME parsing component. Triggering an error condition in certain MIME bodies causes uninitialized memory to be used , leading to a remote denial-of-service as noted by Kaspersky. The CVSS 3.1 score is 9.1 (Critical) with a network attack vector, low c...

CVE-2026-84639 Uninitialized memory in MIME parsing

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

CVE-2021-20323

CVE-2021-20323 الوصف يحتوي Keycloak قبل الإصدار 18.0.0 وبعد الإصدار 10.0.0 على ثغرة XSS منعكسة في نقطة نهاية clients-registrations. يتم تشغيل الثغرة عن طريق تقديم، عبر POST، بنية json بمفتاح كاسم معلمة غير مدعوم من قبل نقطة النهاية. يعكس الرد مفتاح json في رسالة خطأ مع تعيين الترويسة على...

CVE-2017-9822

CVE-2017-9822 DotNetNuke कुकी डिसीरियलाइज़ेशन रिमोट कोड एक्ज़ीक्यूशन RCE DotNetNuke DNN के संस्करण 5.0.0 से 9.3.0 तक डिसीरियलाइज़ेशन भेद्यता से प्रभावित हैं जो रिमोट कोड एक्ज़ीक्यूशन RCE की ओर ले जाती है। DotNetNuke गुमनाम उपयोगकर्ताओं के वैयक्तिकरण विकल्पों को संग्रहीत करने के लिए...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server الاستخدام root@kitploit: $ docker-compose up الاستخدام من Docker Hub root@kitploit: $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master ·...

CVE-2019-10092

CVE-2019-10092: Apache HTTP Server में 'प्रॉक्सी त्रुटि' पृष्ठ के माध्यम से सीमित क्रॉस-साइट स्क्रिप्टिंग Apache HTTP Server 2.4.0-2.4.39 में, modproxy त्रुटि पृष्ठ को प्रभावित करने वाली एक सीमित क्रॉस-साइट स्क्रिप्टिंग समस्या की सूचना मिली थी। एक हमलावर त्रुटि पृष्ठ पर लिंक को दूषित कर सकता है औ...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Security Bypass.

Summary golang-jwt/jwt is used by IBM Storage Fusion Data Foundation, which could cause Security Bypass. CVE-2024-51744, CVE-2025-30204. Vulnerability Details CVEID:CVE-2024-51744 DESCRIPTION: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in...

SUSE CVE-2026-72376

In the Linux kernel, the following vulnerability has been resolved: afs: Fix misplaced inc of net-cellsoutstanding Fix net-cellsoutstanding being incremented before the check for failure of idralloccyclic, leaving the count incremented on error...

cve-2022-42475-poc

CVE-2022-42475 PoC تنفيذ تعليمات برمجية عن بُعد قبل المصادقة في Fortinet SSL VPN الوصف CVE-2022-42475 هي ثغرة أمنية من نوع تجاوز سعة المخزن المؤقت المستند إلى الكومة heap-based buffer overflow في خدمة SSL VPN الخاصة بـ FortiOS، وتسمح للمهاجمين غير المصادَق عليهم بتنفيذ تعليمات برمجية عشوائية عن...

CVE-2026-80687

A flaw was found in the Linux kernel's iommufd/viommu component. An error in the iommufdvdeviceallocioctl function's error handling path can lead to a lock being held indefinitely. This can cause a deadlock, preventing further virtual device vDEVICE operations and resulting in a Denial of Service...

CVE-2023-1454

CVE-2023-1454 Script de détection de la vulnérabilité CVE-2023-1454 Ce document est fourni à titre informatif uniquement. N'utilisez pas les informations techniques et les outils de cet article pour pénétrer dans un système informatique sans autorisation. Toute conséquence directe ou indirecte et...

Advanced-SQL-Injection-Cheatsheet

Aide-mémoire sur l'injection SQL basée sur les erreurs MySQL C'est probablement la vulnérabilité la plus facile à exploiter lors d'une attaque par injection SQL. Un attaquant peut énumérer et extraire la base de données MySQL en utilisant les messages d'erreur SQL à son avantage. Détection de la...

CVE-2023-4220-Exploit

CVE-2023-4220-एक्सप्लॉइट LMS Chamilo 1.11.24 CVE-2023-4220 एक्सप्लॉइट CVE-2023-4220 के लिए इस्तेमाल किया गया यह एक्सप्लॉइट, LMS Chamillo के प्रोग्रामिंग दोष का फायदा उठाता है जो हमें बिना किसी प्रतिबंध के सर्वर पर फ़ाइल अपलोड करने की अनुमति देता है। यह एक्सप्लॉइट HTB की हमारी Easy permX मशीन के ल...

CVE-2025-56764

CVE-2025-56764 — Trivision NC-227WF Summary Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames. Referenced CVE record...

CVE-2024-55374

CVE-2024-55374 Redcap 14.3.13 is vulnerable to user enumeration because it returns distinct error messages depending on whether the user exists or not. This allows an attacker to send multiple HTTP authentication requests to perform brute-force attacks. Although a protection mechanism exists to...

CVE-2026-82739

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmation check. Ash.Resource.Validation.Confirm's atomic implementation atomic/2 in lib/ash/resource/validation/confirm.ex...

CVE-2026-82739

CVE-2026-82739 is a Generation of Error Message Containing Sensitive Information vulnerability in the ash-project ash Elixir framework, specifically in Ash.Resource.Validation.Confirm's atomic implementation. When an actor supplies only a confirmation argument (without the field itself), the mism...

EUVD-2026-68944

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmation check. Ash.Resource.Validation.Confirm's atomic implementation atomic/2 in lib/ash/resource/validation/confirm.ex...