CVE-2026-24061-POC

CVE-2026-24061 - إثبات اختراق تجاوز المصادقة في telnetd تجاوز مصادقة حرج في telnetd يؤدي إلى RCE بصلاحيات الجذر يؤثر على الأنظمة التي تستخدم إصدارات telnetd التي تحتوي على الثغرة منذ عام 2015 فصاعدًا حول يُظهر هذا الإثبات PoC CVE-2026-24061 ، وهي ثغرة حرجة لتجاوز المصادقة في telnetd ظلت غير مكتشف...

CVE-2021-40223

CVE-2021-40223 التطبيق : Rittal CMC PU III Web management الأجهزة : CMC PU III 7030.000 مراجعة البرنامج : V3.11.002 مراجعة العتاد : V3.00 نوع الهجوم : XSS مخزَّن الحل : تحديث إلى مراجعة البرنامج V3.17.10 أو أحدث الملخص : يفشل تطبيق الويب في تنظيف إدخال المستخدم عند تكوين الحوار الخاص بالمستخدمين...

github.com/moby/sys/user: moby/sys/user: Denial of Service via crafted user or group database files

A flaw was found in the moby/sys/user package. The package does not properly limit memory allocation when parsing Unix-style user and group database files, such as /etc/passwd or /etc/group. An attacker who can supply a specially crafted file can cause excessive memory consumption, leading to a...

github.com/moby/sys/user: moby/sys/user: Denial of Service via crafted user or group database files

A flaw was found in the moby/sys/user package. The package does not properly limit memory allocation when parsing Unix-style user and group database files, such as /etc/passwd or /etc/group. An attacker who can supply a specially crafted file can cause excessive memory consumption, leading to a...

CVE-2026-77226

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

EUVD-2026-92791

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

CVE-2026-105698

Langflow (versions 1.0.0 through 1.10.0) is vulnerable to cross-user flow access and unauthorized vertex execution due to a missing ownership check in deprecated handlers. Specifically, the POST /api/v1/build/{flow_id}/vertices and POST /api/v1/build/{flow_id}/vertices/{vertex_id} endpoints faile...

CVE-2026-105698 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/flowid/vertices and POST /api/v1/build/flowid/vertices/vertexid handlers. Through version 1.7.1, an unauthenticated...

CVE-2026-105698 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/flowid/vertices and POST /api/v1/build/flowid/vertices/vertexid handlers. Through version 1.7.1, an unauthenticated...

CVE-2026-105698 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/flowid/vertices and POST /api/v1/build/flowid/vertices/vertexid handlers. Through version 1.7.1, an unauthenticated...

CVE-2026-105652

Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. This iss...

CVE-2026-105651

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...

CVE-2026-105649

Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in...

CVE-2026-46243

🚨 CVE-2026-46243 - CIFSwitch تصعيد الامتيازات محليًا في نواة لينكس LPE ثغرة تصعيد الامتيازات محليًا تؤثر على عميل CIFS/SMB في نواة لينكس. 📖 نظرة عامة CVE-2026-46243 هي ثغرة تصعيد امتيازات محلية LPE في عميل CIFS/SMB الخاص بنواة لينكس. يؤدي التحقق غير السليم من أوصاف مفاتيح cifs.spnego إلى تمكين...

CVE-2021-22911

CVE-2021-22911 نسخة معدّلة من الاستغلال الأصلي لتوفير بعض الوقت عند إعادة تعيين كلمة المرور لمستخدم غير مميّز يفترض البرنامج النصي أنه يمكنك تسجيل الحساب أو أنك تعرف بالفعل بيانات اعتماد المستخدمين غير المميّزين. غيّر كلمة المرور إلى كلمة المرور الصالحة في السطر: 63,73,96. الاستغلال الأصلي:...

CVE-2026-105686 Penpot: Repeated chunk index causes temporary-storage amplification

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither rejects an already stored index nor replaces its previous object. An authenticated user can repeatedly upload the same valid index, causing...

Security Bulletin: Due to the use of Spring Security's WebAuthn, IBM Sterling Control Center is vulnerable to Incorrect Authorization (CVE-2026-47841)

Summary Spring Security's WebAuthn is used by IBM Sterling Control Center as part of dependency in spring-security-web-6.4.12.jar. Vulnerability Details CVEID:CVE-2026-47841 DESCRIPTION: An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when usi...

CVE-2025-2594

CVE-2025-2594 User Registration & Membership = 4.1.2 - تجاوز المصادقة إخلاء مسؤولية! المعلومات الواردة في هذا التقرير الخاص بـ CVE الثغرات والتعرضات الشائعة هي لأغراض تعليمية وإعلامية فقط. التفاصيل المقدمة مبنية على موارد متاحة للعموم، وبحوث وتحليلات أجراها المؤلف. لا يُقصد من المحتوى الترويج لأي...

CVE-2026-20896

CVE-2026-20896 صورة Docker الرسمية لـ Gitea حتى الإصدار 1.26.2 وما يشملها تأتي مع REVERSEPROXYTRUSTEDPROXIES = في إعداداتها الافتراضية. إذا قمت بتفعيل تسجيل الدخول عبر الوكيل العكسي reverse-proxy login، فإن ذلك البدل wildcard يعني أن كل عنوان IP مصدر يُعتبر وكيلاً موثوقًا، وبالتالي يمكن لأي شخص...

CVE-2026-105679 Ghost: Stored XSS via File Uploads on Local Storage

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...