CVE-2014-6271

CVE-2014-6271 GNU Bash के संस्करण 4.3 तक में "ShellShock" नामक एक कमज़ोरी मौजूद है, जो फंक्शन परिभाषाओं के बाद एनवायरनमेंट वेरिएबल्स के मूल्यों में पीछे के स्ट्रिंग्स को प्रोसेस करने के तरीके के कारण उत्पन्न होती है। यह कमज़ोरी दूरस्थ हमलावरों को कुछ परिस्थितियों में एनवायरनमेंट को तैयार करके मनमान...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 रिमोट कोड निष्पादन भेद्यता CVE-2016-5734 सेटअप root@kitploit: git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 एक्सप्लॉइट root@kitploit: python3 cve-2016-5734.py -u root...

CVE-2022-22963

ثغرة Spring Cloud Function CVE-2022-22963 تطبيق معرّض لثغرة CVE-2022-22963 عرض توضيحي لاستغلال CVE-2022-22963 https://user-images.githubusercontent.com/57348147/161266562-51d025f0-54d4-488f-ac50-2317e29bfbdf.mp4 البناء root@kitploit: docker pull me2nuk/cves:2022-22963 docker run -it -p 8080:8080...

CVE-2021-46365

CVE-2021-46365: Magnolia CMS में असुरक्षित XML पार्सिंग Magnolia v6.2.3 और उससे नीचे के संस्करणों में Export फ़ंक्शन में एक समस्या है जो हमलावरों को एक क्राफ्टेड XLF फ़ाइल के माध्यम से XML External Entity हमले करने की अनुमति देती है। विक्रेता का खुलासा: इस कमजोरी के लिए विक्रेता का खुलासा और सुधा...

CVE-2020-0674-Exploit

CVE-2020-0674 CVE-2020-0674 هي ثغرة من نوع use-after-free في محرك jscript القديم. يمكن تشغيلها في إنترنت إكسبلورر. الاستغلال هنا من كتابة maxpl0it، لكن الثغرة نفسها اكتشفتها Qihoo 360 بينما كانت تُستغل في هجمات حقيقية. هذا الاستغلال يكتفي بتشغيل الآلة الحاسبة calc. يمكن العثور على الشرح الكامل...

GHSA-73WF-GQ98-2V4G Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)

Vulnerability Details File: node.js Function: normalizeStats line 214, reached from getStat called unconditionally on every browserslist call and loadStat Root Cause js function normalizeStatsdata, stats if !data data = if stats && 'dataByBrowser' in stats stats = stats.dataByBrowser if typeof...

CVE-2026-10195

The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFmpeg path parameter before passing it to the exec function, combined with missing authorization checks on the REST API endpoints...

EUVD-2026-69300

The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFmpeg path parameter before passing it to the exec function, combined with missing authorization checks on the REST API endpoints...

CVE-2026-10195 FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting

The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFmpeg path parameter before passing it to the exec function, combined with missing authorization checks on the REST API endpoints...

CVE-2026-10195

FS-Poster WordPress plugin (versions up to and including 8.0.1 ) is vulnerable to authenticated remote code execution via insufficient sanitization of the FFmpeg path parameter before it is passed to the exec() function, combined with missing authorization checks on REST API endpoints. Attackers ...

EUVD-2026-69298

A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, doread in gvfsbackendmtp.c trusts the data length returned by the device without limiting it to the original size requested by the client. If a malicious MTP device responds with more bytes than requested,...

CVE-2026-84267

CVE-2026-84267 is an uninitialized heap memory disclosure in the SFTP backend of gvfs (GNOME Virtual File System). The root cause is in the read_string() function, which allocates a buffer without verifying it is fully populated. A malicious SFTP server can send a short FXP_HANDLE reply, causing ...

CVE-2026-73812

httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handlebody/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with...

CVE-2026-18771

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This issue affects Talassoft Industrial Management Software: from V4 before V.16...

CVE-2026-84268 Gvfs: sftp: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

CVE-2026-84153

Xinhu Rainrock RockOA versions up to 2.3.2 contain a SQL injection vulnerability in the toaddval function of /index.php?m=index&a=publicsavevalue&ajaxbool=true. Manipulating the Value parameter allows a remote attacker with low privileges to affect confidentiality, integrity, and availability (CV...

EUVD-2026-69286

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. Executing a manipulation of the argument Value can lead to sql injection. The attack may be performed from remote. The...

CVE-2026-84153 Xinhu Rainrock RockOA index.php toaddval sql injection

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. Executing a manipulation of the argument Value can lead to sql injection. The attack may be performed from remote. The...

CVE-2026-18771 Missing Authentication for Critical Function in TMT Machine's Talassoft Industrial Management Software

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This issue affects Talassoft Industrial Management Software: from V4 before V.16...

CVE-2026-83614 xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.3.0 through 0.6.0, two independent quadratic paths can cause denial of service. In lib/sax.js, parseElementStartPart...