running-CVE-2024-32002-locally-for-tesing

हम इसे स्थानीय उपयोग के लिए अनुकूलित कर रहे हैं हम इस ब्लॉग पोस्ट का अनुसरण कर रहे हैं लेकिन कुछ प्रमुख अंतरों के साथ https://amalmurali.me/posts/git-rce यह कैसे काम करता है 1. एक दुर्भावनापूर्ण रिपॉजिटरी gitrce में एक विशेष रूप से तैयार पथ वाला एक सबमॉड्यूल शामिल है। 2. सबमॉड्यूल पथ एक केस वेरिए...

monstra_cms-3.0.4--getshell

monstracms-3.0.4--getshell monstracms-3.0.4-अपलोड getshell CVE-2018-17418 कोड विश्लेषण Code analysis: monstra\plugins\box\filesmanager\filesmanager.admin.php की पंक्ति 150 पर forbiddentypes चर है जो ब्लैकलिस्ट प्रतिबंध के रूप में कार्य करता है। इस चर का अनुसरण जारी रखें। उसी फ़ाइल की पंक्ति 22 पर...

CVE-2026-73476

Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...

EUVD-2026-69990

Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...

CVE-2026-73476

Drupal External Authentication (versions 0.0.0 through 2.0.13 ) is affected by an improper handling of case sensitivity flaw that allows privilege escalation . The module fails to ensure exact matching of externally supplied identity values when storing and looking up authentication mappings unde...

UBUNTU-CVE-2026-73270

Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inet...

CVE-2026-84303

CVE-2026-84303 affects gRPC-Go (the Go implementation of gRPC). The xDS RBAC HTTP filter (internal/xds/httpfilter/rbac/rbac.go) fails to lowercase header matcher names in normalizeHeaderMatcher, while incoming metadata keys are already lowercase. A DENY policy using a mixed-case name (e.g., X-Rol...

CVE-2026-84303 gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as...

AZL-98484 CVE-2026-73270 affecting package erlang 26.2.5.21-4

Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected directory by requesting them with different casing, on deployments whose filesystem is case-insensitive. modauth:secretpath/3 decides...

CVE-2026-73270

Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected directory by requesting them with different casing, on deployments whose filesystem is case-insensitive. modauth:secretpath/3 decides...

CVE-2026-73270

Erlang/OTP inets httpd contains an improper handling of case sensitivity flaw in mod_auth:secret_path/3 , which matches a request path against a configured protected directory using re:run/3 without the caseless option . On case-insensitive filesystems , a request for /secret/file against a direc...

EUVD-2026-69243

Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected directory by requesting them with different casing, on deployments whose filesystem is case-insensitive. modauth:secretpath/3 decides...

CVE-2026-83612

xmldom is a pure JavaScript DOMParser and XMLSerializer module. In versions from 0.9.0-beta.1 up to the fix in 0.9.12 , HTML-mode parsing via DOMParser.parseFromString() mishandles mixed-case closing tags for raw-text elements (script, style, textarea, title). The root cause is that parseHtmlSpec...

PT-2026-84264

Name of the Vulnerable Software and Affected Versions Erlang/OTP versions 17.0 through 27.3.4.16 Erlang/OTP versions 28.0 through 28.5.0.5 Erlang/OTP versions 29.0 through 29.0.5 Description Improper handling of case sensitivity in the inets httpd component allows a remote unauthenticated attacke...

CVE-2026-9086-poc

CVE-2026-9086: إثبات المفهوم PoC لتجاوز التحقق من مخطط URI في Keycloak مع ثغرة XSS النسخة الإنجليزية نظرة عامة يحتوي هذا المستودع على إثبات المفهوم PoC لثغرة Cross-Site Scripting XSS CVE-2026-9086 في التحقق من URI الخاص بالعميل في Keycloak. كان Keycloak المُصاب بالثغرة يتحقق من مخططي javascript: ...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

Chromium: CVE-2026-78959 Improper handling of case sensitivity in FileSystem

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-78959

A flaw was found in Google Chrome's FileSystem. This improper handling of case sensitivity could allow a remote attacker, leveraging social engineering, to bypass system access restrictions. The attacker could achieve this by enticing a user to visit a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-78959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...

DEBIAN-CVE-2026-78959

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...