CVE-2026-73762

CVE-2026-73762 affects the API endpoint of HPE ArubaOS-CX (AOS-CX) , where a remote actor with high privileges can circumvent configured access controls, potentially gaining unauthorized access to management functionality that should be restricted. The vulnerability is rated CVSS 3.1 6.6 (MEDIUM)...

CVE-2026-73762 Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy...

EUVD-2026-69626

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy...

CVE-2019-16759-bypass

CVE-2019-16759-bypass...

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

تقرير المعالجة: CVE-2013-3900 على Windows Server 2019 Azure VM معالجة CVE-2013-3900 EnableCertPaddingCheck أثناء إجراء فحص ثغرات أمنية مُصادَق عليه باستخدام Tenable/Nessus، حددت وجود CVE-2013-3900 على مثيل Windows Server 2019 Datacenter المستضاف في Microsoft Azure. استخدم الفحص بيانات اعتماد إدار...

NextJS-Exploit-

NextSploit: ماسح ومستغل لـ CVE-2025-29927 في Next.js NextSploit هي أداة سطر أوامر مصممة لاكتشاف واستغلال CVE-2025-29927 ، وهو عيب أمني في Next.js. تقوم الأداة أولاً بتحديد ما إذا كان الموقع المستهدف يعمل بـ Next.js وتحدد ما إذا كان إصداره يقع ضمن النطاق المعرض للخطر. إذا تم تأكيد أن الموقع معرض...

PHP-REVERSE-SHELL

PHP Reverse Shell قوي ومتخفي هذه أداة ريفيرس شل بلغة PHP قوية ومتخفية، مصممة للاختراق الأخلاقي واختبار الاختراق. تنشئ اتصالاً موثوقاً وهادئاً عائداً إلى جهازك. ⚠️ إخلاء مسؤولية تم تطوير هذه الأداة PHP reverse shell لأغراض تعليمية واختبار اختراق مصرح به فقط. المطور ليس مسؤولاً عن أي استخدام خاطئ أو...

CVE-2019-17240

CVE-2019-17240 استغلال الإصدارات حتى 3.9.2 وما قبلها من Bludit CMS معرّضة لتجاوز آلية مكافحة القوة الغاشمة المخصصة لحظر المستخدمين الذين حاولوا تسجيل الدخول بشكل غير صحيح 10 مرات أو أكثر. تم اكتشاف الثغرة بواسطة Rastating. عند إرسال طلب تسجيل دخول بقيمة ترويسة X-Forwarded-For عبارة عن سلسلة متغير...

CVE-2021-44270

CVE-2021-44270 Anviz-Access-Control-Authentication-Bypass https://nvd.nist.gov/vuln/detail/CVE-2021-44270...

CVE-2025-55182-PoC

React2Shell CVE-2025-55182 PoC الاستخدام root@kitploit: Interactive shell ./react2shell -u http://target:3000 Single command ./react2shell -u http://target:3000 -c "id" WAF bypass 128KB junk data ./react2shell -u http://target:3000 -waf 128 البناء root@kitploit: go build -o react2shell . الخيارات...

CVE-2015-3224

CVE-2015-3224 Exploit - Rails Web Console RCE Une implémentation JavaScript Node.js de l'exploit pour CVE-2015-3224. Cet outil cible les applications Ruby on Rails exécutant des versions vulnérables de la gem web-console, permettant une exécution de code à distance RCE non authentifiée. À propos ...

[SECURITY] [DSA 6480-1] keystone security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6480-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 01, 2026 https://www.debian.org/security/faq -...

GHSA-WWV5-G3V4-889X Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`

Summary The CVE-2026-35536 fix added a validation loop that rejects \x00-\x20\x3b\x7f, but only for the hardcoded lowercase keys name/domain/path/samesite. The still-live deprecated kwargs path writes attacker-supplied attribute values straight into the Morsel with no validation, and because...

CVE-2026-78603

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

CVE-2026-76657

Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...

CVE-2026-73735

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some information beyond their privilege level. Successful exploitation could allow an attacker to obtain limited information and/or make limited changes beyond what is...

CVE-2026-73733

Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent existing authentication controls. Successful exploitation could allow an attacker to retain limited access to the affected system after that access should ha...

CVE-2026-73726

A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access,...

CVE-2026-73704

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...

CVE-2026-19766

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...