CVE-2026-82735 Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service

Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to force an expensive regular expression to run on input that a length constraint should have already rejected. Ash.Type.String.applyconstraints/2 lib/ash/type/string.ex evaluated the :match regex regardless of...

CVE-2026-82734 Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal

Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to submit a non-finite decimal value that bypasses numeric bounds constraints or fails later operations on the value. Ash.Type.Decimal cast input through Ecto's decimal cast in castinput/2 and...

CVE-2026-82734 Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal

Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to submit a non-finite decimal value that bypasses numeric bounds constraints or fails later operations on the value. Ash.Type.Decimal cast input through Ecto's decimal cast in castinput/2 and...

EUVD-2026-68960

Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to submit a non-finite decimal value that bypasses numeric bounds constraints or fails later operations on the value. Ash.Type.Decimal cast input through Ecto's decimal cast in castinput/2 and...

CVE-2026-82734

CVE-2026-82734 affects ash-project ash (Elixir), versions 1.28.0 through 3.32.1 . The vulnerability is in Ash.Type.Decimal (lib/ash/type/decimal.ex), which casts input via Ecto's decimal cast without verifying the result is finite. Because Elixir's Decimal module treats Infinity and NaN as valid ...

CVE-2026-82732

Improper Input Validation vulnerability in ash-project ashtypescript allows a remote attacker to submit argument values outside a declared allowlist or bound on typed-controller routes. AshTypescript.TypedController.RequestHandler in lib/ashtypescript/typedcontroller/requesthandler.ex calls...

CVE-2026-82730

Incorrect Authorization vulnerability in ash-project ashtypescript allows an unauthorized RPC caller to read attribute values that Ash field policies denied. When a field policy denies an attribute, Ash substitutes %Ash.ForbiddenField, which retains the real value in originalvalue because embedde...

CVE-2026-75865

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

Thank-u-Next

Thank u Next – Outil d'exploitation CVE-2025-29927 🧠 Qu'est-ce que CVE-2025-29927 ? Ce n'est pas juste un contournement — c'est une révélation. Un seul en-tête, mal compris et mal géré par la logique du middleware, devient une clé maîtresse pour ce qui était censé être verrouillé. CVE-2025-29927...

CVE-2023-40037

CVE-2023-40037: التحقق غير الكامل من عناوين URL لاتصالات JDBC و JNDI في Apache NiFi تدعم Apache NiFi من الإصدار 1.21.0 إلى 1.23.0 الوصول إلى JDBC و JNDI JMS في العديد من المعالجات وخدمات التحكم مع التحقق من عنوان URL للاتصال الذي لا يوفر حماية كافية ضد المدخلات المصممة. يمكن للمستخدم المصادق عليه...

CVE-2020-13965

CVE-2020-13965: ثغرة برمجية من نوع Cross‑Site Scripting عبر مرفق XML ضار في Roundcube Webmail توجد ثغرة من نوع Cross‑Site Scripting XSS في إصدارات Roundcube قبل 1.4.5 و1.3.12. من خلال استغلال تحليل المرفقات من نوع "text/xml"، يمكن للمهاجم تجاوز مرشح البرامج النصية الخاص بـ Roundcube وتنفيذ كود...

CVE-2020-12625

CVE-2020-12625: هجوم النص البرمجي عبر المواقع XSS عبر مرفق HTML ضار في Roundcube Webmail توجد ثغرة أمنية من نوع النص البرمجي عبر المواقع XSS في إصدارات Roundcube قبل 1.4.4 و1.3.11 و1.2.10. من خلال استغلال عنصر XML في بريد إلكتروني مع مرفق من نوع text/html، يمكن للمهاجم تجاوز مرشح النصوص البرمجي ف...

CVE-2019-9849

CVE-2019-9849: استرداد رسومات التعداد النقطي عن بُعد في "الوضع الخفي" في LibreOffice يوفّر LibreOffice "وضعًا خفيًا" تُسمح فيه فقط للمستندات القادمة من مواقع تُعتبر "موثوقة" باسترداد الموارد البعيدة. هذا الوضع ليس الوضع الافتراضي، ولكن يمكن تفعيله من قبل المستخدمين الذين يرغبون في تعطيل قدرة...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

D-Link-CVE-2021-27342-exploit

D-Link-CVE-2021-27342-exploit استغلال لثغرة CVE-2021-27342 تجاوز حماية تخمين كلمة المرور لمصادقة telnet...

Trespasser

CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...

CVE-2018-17961

construire l'image exécuter le conteneur avec redirection de port s'y connecter via ssh -X exécuter evince executeonlybypass.ps vérifier que l'exploit a écrit dans /.bashrc...

EUVD-2026-68931

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

CVE-2026-75865 WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

CVE-2026-75865

WPLP Cookie Consent (a WordPress plugin for GDPR/CCPA consent management) is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 4.4.1 . The root cause combines missing file type validation in the saas_upload_logo() function with an authorization bypass on the ...