cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — تجاوز المصادقة في PAN-OS → سلسلة تصعيد الامتيازات CVE| الوصف| CVSS ---|---|--- CVE-2024-0012| تجاوز مصادقة واجهة إدارة PAN-OS| 9.3 CVE-2024-9474| تصعيد الامتيازات في PAN-OS| 6.9 عند الربط بينهما، تسمح هذه الثغرات بتنفيذ تعليمات برمجية عن بعد بدون مصادقة على واجهة...

CVE-2026-84218 Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

EUVD-2026-69129

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

CVE-2026-84218 Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

CVE-2026-84218

CVE-2026-84218 affects Jolokia (org.jolokia/jolokia-core), a JMX-over-HTTP bridge. The flaw is in the JSR-160 proxy functionality, where the JNDI denylist introduced to mitigate CVE-2018-1000130 is incomplete. The denylist only rejects URLs matching service:jmx:rmi:///jndi/ldap:.*, but attacker-c...

CVE-2026-84218

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

CVE-2026-84147

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...

CVE-2026-58575

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

Important: Red Hat Security Advisory: iscsi-initiator-utils security update

An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

CVE-2023-21768-DSE-Bypass

مُفَرَّع تم تفريع هذا المشروع من: WindowsLPEAFDCVE-2023-21768 . تحديثات هذا المشروع هو تحديث من إكسبلويت chompie1337 وسيقوم بتعطيل DSE، تحميل برنامج تشغيل غير موقع وتمكين DSE...

CVE-2026-58575

Dell PowerStore is affected by an Authentication Bypass by Spoofing vulnerability that allows an authenticated attacker to escalate privileges to Administrator . The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-exploitable conditions with l...

EUVD-2026-69060

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

CVE-2026-58575

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

CVE-2020-14882-WebLogic-Analysis

بحث الثغرات الأمنية: استغلال سلسلة CVE-2020-14882 وCVE-2020-14883 في Oracle WebLogic Server يحتوي المستودع على تقرير فني Write-up ونموذج إثبات مفهوم Proof of Concept - PoC لتوضيح سلسلة الثغرات الأمنية المتعلقة بتجاوز المصادقة Authentication Bypass وتنفيذ الأكواد عن بُعد RCE في مكوّن وحدة تحكم...

CVE-2022-36537

CVE-2022-36537 ملخص يستخدم R1Soft Server Backup Manager إطار عمل ZK كإطار رئيسي. يتطلب أمانه من جميع أطراف مشروع Web3 الانتباه بشكل أكبر إلى الثغرات الأمنية لمختلف البنى التحتية لـ Web3 وتصحيحها في الوقت المناسب لتجنب المخاطر الأمنية المحتملة وفقدان الأصول الرقمية. سنقوم باكتشاف وتتبع مختلف المخا...

CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-77194

The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up to, and including, 4.8.0. This is due to improper identity verification during the public registration flow in WordPress Multisite environments, where the...

CVE-2026-83595

AVideo contains a cross-site request forgery vulnerability in plugin/API/set.json.php that allows attackers to perform state-changing actions by crafting GET requests that bypass CSRF protection. Attackers can navigate a victim's browser to a malicious URL with API parameters to delete videos,...

RLSA-2026:61378 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP...