CVE-2026-82659

A flaw was found in nodemailer. Authenticated attackers can bypass security flags by crafting raw messages with specific file paths or URLs. This allows them to read arbitrary files from the system or perform Server-Side Request Forgery SSRF, potentially leading to information disclosure or...

CVE-2026-81727

A flaw was found in NLTK. This vulnerability, a filesystem containment bypass, allows a local attacker with write access to a shared downloader directory to create special links hardlinks that point to files outside the intended installation area. When a package is extracted, these hardlinks can...

WP2Shell

WP2Shell - استغلال RCE قبل المصادقة في ووردبريس CVE-2026-63030 + CVE-2026-60137 الإصدار: 4.0.0 المؤلف: G0D150NE 📌 نظرة عامة WP2Shell هي أداة استغلال متكاملة السلسلة لتنفيذ الأوامر عن بُعد قبل المصادقة في ووردبريس. تجمع بين ثغرتين حرجتين: CVE-2026-63030 - حقن SQL في نقطة نهاية REST API Batch...

CVE-2012-2122-Home-Lab

नीचे अंग्रेज़ी संस्करण CVE-2012-2122 MySQL प्रमाणीकरण बायपास होम लैब यह लैब CVE-2012-2122 - MySQL Authentication Bypass कमजोरी का प्रदर्शन है।\ यह MySQL संस्करण 5.5.23 या उससे नीचे में पासवर्ड मानों की तुलना में त्रुटि के कारण होता है।\ जब हमलावर बार-बार गलत पासवर्ड भेजता है, तो MySQL अनजाने में...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO أجهزة تجاوز التحقق من الهوية - استغلال حول: ثغرة تجاوز التحقق من الهوية الموجودة في بعض منتجات Dahua أثناء عملية تسجيل الدخول. يمكن للمهاجمين تجاوز التحقق من هوية الجهاز عن طريق بناء حزم بيانات ضارة. root@kitploit: python3 dahuaexploit.py --ip IP --port PORT...

polkit-CVE-2021-3560_writeup

Try Hack Me - Polkit:CVE-2021-3560 المؤلف: Atharva Bordavekar الصعوبة: معلومات النقاط: 32 الثغرة: CVE-2021-3560 سنقوم أولاً بالتحقق من إصدار polkit للحصول على رؤى أفضل. root@kitploit: apt list --installed | grep policykit-1 policykit-1/focal,now 0.105-26ubuntu1 amd64 installed,upgradable to:...

BIT-GITLAB-2026-3035 Authentication Bypass Using an Alternate Path or Channel in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with project Maintainer permissions could have accessed the terminal of a protected environment they were no...

Important: Red Hat Security Advisory: runc security update

An update for runc is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

CVE-2025-66698

CVE-2025-66698 البرنامج المستهدف: Veda Semantic Machines الإصدار v5.4.8 على الأرجح جميع الإصدارات السابقة. نوع الثغرة: تجاوز المصادقة. معرف CVE: CVE-2025-66698. الملخص: يتحقق النظام بشكل غير صحيح من معامل التذكرة، حيث يتعامل مع السلسلة الفارغة كجلسة صالحة. رابط المشروع: Veda Semantic Machines 18...

CVE-2025-29927

CVE-2025-29927 — Next.js contournement de l'autorisation du middleware Résumé : vulnérabilité dans le middleware de Next.js permettant de contourner les vérifications d'autorisation en falsifiant l'en-tête x-middleware-subrequest. Table des matières CVE-2025-29927 — Next.js contournement de...

CVE-2025-12758

CVE-2025-12758: تجاوز محدد التنويع الموحّد Unicode Variation Selector في الدالة isLength من Validator.js معرّف CVE: CVE-2025-12758 درجة CVSS: 8.7 HIGH الحرجية: HIGH CWE: CWE-792 تصفية غير مكتملة لمثيل واحد أو أكثر من العناصر الخاصة تاريخ النشر: 26 نوفمبر 2025 تاريخ الإفصاح: 19 أكتوبر 2025 نظرة عا...

CVE-2026-42008

A flaw was found in Dovecot. Forwarded information from a host listed as a trusted proxy is not properly separated from Dovecot's internal authentication fields. This allows a malicious host configured as a trusted proxy to inject values as internal authentication fields, enabling it to...

CVE-2026-40205

A flaw was found in Dovecot. An attacker with a partially valid OAuth2 token can bypass authorization checks in remote token validation paths. This allows the attacker to authenticate with insufficient permissions, leading to a breach of integrity where the configured authorization policy is not...

cve-2025-25257

CVE-2025-25257 - प्रयोग वातावरण प्रयोग की वास्तुकला वातावरण FortiWeb के कमजोर घटकों का अनुकरण करता है root@kitploit: कमजोर एंडपॉइंट: /api/system/fabric/config इंजेक्शन वेक्टर: HTTP हेडर Authorization: Bearer तंत्र: प्रत्यक्ष SQL संयोजन Python f-string प्रमाणीकरण: कोई नहीं पूर्ण बाईपास डेटाबेस:...

kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...

kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...

-WinVerifyTrust-Signature-Validation-CVE-2013-3900-Mitigation

CVE-2013-3900 est une vulnérabilité d'exécution de code à distance dans la manière dont la fonction WinVerifyTrust de Microsoft gère la vérification de signature Authenticode de Windows. Cette faille permet à un attaquant de modifier un fichier exécutable signé en ajoutant du code malveillant dan...

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that's been put to use by a Russia-aligned threat actor known as UAC-0099 against a target in Ukraine with an aim to interfere with artificial intelligence AI-assisted analysis. The idea, ESET said in a series of posts o...

CVE-2025-51458-exp

CVE-2025-51458-exp DB-GPT --sql "SELECT VERSION" Dump tables python3 exp.py http://target:5670 --dump-tables Dump schema python3 exp.py http://target:5670 --dump-db DuckDB bypass python3 exp.py http://target:5670 --duckdb-bypass --sql "SELECT CURRENTSETTING'accessmode'" Interactive mode python3...