EUVD-2026-94982

Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6...

CVE-2025-63307

CVE-2025-63307 – ثغرة تخزينية للبرمجة النصية عبر المواقع XSS مع مصادقة في laravel-file-manager الإصدار 3.3.1 🧭 نظرة عامة ثغرة تخزينية للبرمجة النصية عبر المواقع XSS مع مصادقة في laravel-file-manager الإصدار 3.3.1 والإصدارات الأدنى تسمح للمهاجمين الذين لديهم حق الوصول إلى واجهة مدير الملفات بحقن...

SUSE-SU-2026:4584-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push was updated to version 5.2.5: - Removed token based authentication mechanism for packagepush bsc1230949 spacecmd was updated to version 5.2.10: - Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 -...

CVE-2020-10977

استغلال بايثون لقراءة ملفات تعسفية في مثيل خاص لـ GitLab بتاريخ 03/23/2020، تم نشر تقرير ثغرة مع إثبات المفهوم PoC الخاص بها على hackerone بواسطة William Bowling باستخدام هذه الثغرة يمكننا قراءة أي ملفات قابلة للقراءة عالميًا بصلاحيات 444 أو أكثر على خادم GitLab مثل /etc/passwd وما إلى ذلك...

CVE-2026-5047

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords...

everest-backup-cve-2025-11380

CVE-2025-11380 Code de preuve de concept pour CVE-2025-11380 - accès non authentifié aux sauvegardes dans le plugin WordPress Everest Backup. Lien vers l'article de blog à venir...

Satel Netco Design

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. 2. RECOMMENDED PRACTICES CISA...

EUVD-2026-94758

A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory...

CVE-2026-5047

Brocade SANnav (HPE B-Series SANnav Management Portal) is vulnerable to CWE-922: Insecure Storage of Sensitive Information in versions prior to 2.4.0b and 3.0.0 . The application incorrectly prints base64 encoded passwords and authentication tokens into log files, including the SANnav supportsave...

CVE-2026-5047

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords...

EUVD-2026-94756

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords...

CVE-2024-23334-PoC

CVE‑2024‑23334 اجتياز المسار - PoC لقد أنشأت هذا السكريبت لأتمتة استغلال CVE‑2024‑23334 على جهاز Hack The Box Chemistry. تؤثر هذه الثغرة على إصدارات aiohttp ≥ 1.0.5 و 3.9.2 عندما يتم تكوين التطبيق لخدمة الملفات الثابتة مع followsymlinks=True، مما يسمح باجتياز الدليل عن بعد والوصول غير المصرح به إ...

CVE-2026-87667

An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...

CVE-2026-87667

An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...

EUVD-2026-94695

An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...

CVE-2026-87667

An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...

acropalypse-reconstructor

أداة أكروباليبس المتعددة عبر سطر الأوامر نص بيثون خفيف الوزن وبدون واجهة رسومية مصمم لاكتشاف وإعادة بناء الصور المقتصة المعرضة لثغرة أكروباليبس CVE-2023-21036 في تطبيق Markup لهواتف Google Pixel و CVE-2023-28303 في أداة القص بنظام Windows. تتيح لك هذه الأداة استعادة بيانات البكسل الزائدة من ملفات...

CVE-2026-82627

The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...

PT-2026-107767

The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...

PT-2026-108151

Name of the Vulnerable Software and Affected Versions music-metadata versions prior to 11.16.0 Description The ID3v2 parser trusts the syncsafe tag-size field and allocates the complete tag body before verifying if the input contains the declared bytes. A specially crafted file such as MP3, FLAC,...