PT-2026-107146

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

PT-2026-106738

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type text and launch app tools in ufo/client/mcp/http servers/mobile mcp server.py pass the authenticated caller-controlled text and package name parameters into adb shell comma...

PT-2026-106333

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user email' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and...

PT-2026-106774

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu anti-forgery parameter in crayons store.php, causing the authorization dispatcher to resolve an...

PT-2026-106797

Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-multi-tenant versions prior to 3.90.0 @payloadcms/plugin-multi-tenant canary versions prior to 4.0.0-canary.34 Description An authenticated user restricted to a single tenant can create a record within another tenant, provid...

PT-2026-106286

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager KCM responder during Kerberos ticket-granting ticket TGT renewal, where a deferred callback accesses memory that has already been released. An authenticated local user with a renewable Kerberos tick...

PT-2026-106823

Name of the Vulnerable Software and Affected Versions @quasar/ssl-certificate versions prior to 2.1.0 @quasar/cli versions prior to 5.0.4 @quasar/app-vite versions prior to 3.3.0 Description The @quasar/ssl-certificate utility caches a combined private key and certificate PEM without applying...

PT-2026-106294

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Microsoft Graph Open Data Protocol OData queries. A low-privileged local user can exploit this flaw by submitting a crafted...

PT-2026-107266

Name of the Vulnerable Software and Affected Versions @backstage/plugin-catalog-backend-module-gitlab versions prior to 0.8.7 Description Improper authorization exists during GitLab organizational user ingestion. Deployments that enable GitLab organization event ingestion and use scoped catalog...

CVE-2026-105797: Improper Neutralization of Special Elements used in an OS Command

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization ordering flaw in POST /api/user/plugins allows an authenticated low-privileged user to omit the top-level MCP type so tha...

PT-2026-107264

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package contains incorrect authorization in the scaffolder task listing. This allows an authenticated internal user to view metadata for scaffolder tasks th...

CVE-2026-106104: Inefficient Regular Expression Complexity

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR passed an unbounded User-Agent request header to getMatch in ui/src/plugins/platform/Platform.js, whose browser-detection expressions combined greedy captures with repeated...

Cisco ASA Authentication Bypass by Spoofing (CVE-2023-20256)

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

A read-after-free memory flaw was found in the Linux kernel's garbage collection

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close and fget simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on...

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – استنساخ وترحيل ووردبريس بنقرة واحدة = 0.1.0.38 - غياب التفويض يسمح بإعداد API دون مصادقة/تحديث خيارات عشوائية/إنشاء مستخدم إداري...

CVE-2021-41091

CVE-2021-41091 خطأ في Moby Docker Engine يسمح للمستخدمين غير المصرح لهم بعبور الدلائل وتنفيذ البرامج مباشرة من الحاوية على الجهاز المضيف؛ إذا كان هناك برنامج suid في الحاوية، يمكن للمستخدم تشغيله كـ suid على الجهاز المضيف. PoC في محطة الحاوية، نقوم بتنزيل الملف docker.sh، ثم نقوم بتشغيله كمستخدم...

CVE-2026-24061-setup

CVE-2026-24061 الإعداد يحتوي هذا المستودع على إعداد Docker لـ CVE-2026-24061. بعد تثبيت Docker، قم فقط بما يلي: 1. استنسخ هذا المستودع. 2. شغّل الأمر التالي: sudo docker build . --tag telnetd-auth-bypass 3. بمجرد إنشاء صورة docker، يمكننا تشغيل الحاوية باستخدام الأمر التالي: sudo docker run -dt...

CVE-2025-64446-Exploit

CVE-2025-64446-Exploit استغلال CVE-2025-64446 على fortiweb waf؛ باستخدام هذا الاستغلال يمكنك إنشاء مستخدم وكلمة مرور. طريقة التشغيل؟ python3 exploitforti.py targets.txt python3 exploitforti.py 192.168.1.1 python3 exploitforti.py 192.168.1.1:8443 python3 exploitforti.py https://192.168.1.1:8443...

CVE-2026-11961

CVE-2026-11961 أداة استغلال جماعي لثغرة CVE-2026-11961 التي تؤثر على إضافة WordPress User Registration & Membership. الميزات كشف إصدار الإضافة دعم هدف واحد معالجة دفعات من الأهداف دعم تعدد الخيوط بيانات اعتماد عشوائية أو مخصصة دعم بروكسي HTTP/HTTPS إعداد مهلة الطلب إخراج بصيغة JSONL دعم ملفات الس...

DNS-Mayhem-CVE-2026-41096-Deep-Dive

DNS-Mayhem-CVE-2026-41096-Deep-Dive تحليل تقني متعمق لثغرة CVE‑2026‑41096، وهي تجاوز سعة كومة heap overflow حرج في DNSAPI.dll بنظام Windows يتيح تنفيذ التعليمات البرمجية عن بُعد عبر استجابات DNS مصمّمة خصيصًا. يتضمن نواقل الهجوم، ورؤى حول التصحيح، وإرشادات دفاعية لفرق الأمن. نظرة عامة...