react-server-cve-lab

React Server Components Security Lab CVE-2025-55183 & CVE-2025-55184 रिएक्ट सर्वर कंपोनेंट्स में CVE-2025-55183 स्रोत कोड प्रकटीकरण और CVE-2025-55184 सेवा अस्वीकार कमजोरियों के लिए एक व्यापक सुरक्षा परीक्षण वातावरण। ⚠️ अस्वीकरण केवल शैक्षिक और सुरक्षा अनुसंधान उद्देश्यों के लिए इस भंडार में...

svn-extractor

Svn-Extractor في كثير من الأحيان، يواجه مختبرو اختبار الاختراق لتطبيقات الويب وجود مجلدات .svn. لمن لا يعرف، مجلد .svn يستخدمه نظام التحكم في الإصدارات SVN لأداء عملياته. في اختبار الاختراق الصندوق الأسود، يحتوي هذا المجلد على كمية هائلة من المعلومات. بعض المجالات الرئيسية التي يمكن أن يساعد فيها...

CVE-2025-55183

CVE-2025-55183 ماسح ضوئي لثغرة كشف الكود المصدري لوظائف خادم React. ما هذا؟ CVE-2025-55183: يمكن استغلال Server Actions في React 19.0.0-19.2.1 لكشف الكود المصدري الكامل لها، بما في ذلك الأسرار المضمّنة ومفاتيح API وبيانات اعتماد قواعد البيانات. المراجع:...

CVE-2024-38475

CVE-2024-38475 CVE-2024-38475 का शोषण modrewrite फ़ाइलसिस्टम पथ मिलान में कमजोरी इस रिपॉजिटरी में वेब सर्वर कमजोरियों के परीक्षण के लिए एक Python स्क्रिप्ट है, जो विशेष रूप से Apache सर्वर को लक्षित करती है। स्क्रिप्ट संभावित समस्याओं modrewrite फ़ाइलसिस्टम पथ मिलान में कमजोरी के लिए निर्देशिकाओं...

CVE-2026-84149

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files,...

CVE-2026-84149 Information Disclosure Vulnerability in Manacle Technologies ERP System

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files,...

EUVD-2026-69059

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files,...

CVE-2026-32662

CVE-2026-32662: Code de Débogage Actif en Production Avis Champ| Valeur ---|--- CVE| CVE-2026-32662 ICSA| ICSA-26-055-03 Mise à jour A CVSS 3.1| 5.3 Moyen Vecteur| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE| CWE-489 Code de Débogage Actif Chercheur| Michael Groberman — Gr0m Publié| 2026-04-...

nextjs-security-update

nextjs-security-update कुछ लोग नई Next.js कमजोरियों का फायदा उठाने के लिए OSS टूल बना रहे हैं। यह एक टूल है जो इसका मुकाबला करता है - यह आपके सभी GitHub खातों में मौजूद आपके सभी Next.js ऐप्स को अपग्रेड करना बेहद आसान बना देता है। यह अंदरूनी तौर पर official Vercel fix tool का उपयोग करता है। क्या ह...

postcss: PostCSS: Information disclosure via crafted sourceMappingURL

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...

CVE-2026-13460

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...

CVE-2026-13460

CVE-2026-13460 affects IBM Storage Scale GUI, with versions 5.2.3.0–5.2.3.8 and 6.0.0.0–6.0.1.0 containing a hardcoded token in the GUI source used for inter-node cluster communication and REST API authentication. The security bulletin indicates fixes in 5.2.3.9 or later and 6.0.1.1 or later. Rem...

CVE-2026-16581

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls...

CVE-2026-16581

In igloohome Smart Lock Mobile App versions 3.2.3 and earlier, the CVE-2026-16581 describes an Inclusion of Sensitive Information in Source Code that could allow an unauthorized actor to access functions or backend services not sufficiently protected by authentication controls. The affected softw...

CVE-2026-16581

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls...

CVE-2026-13597

The 微信二维码登陆 WordPress plugin through 1.3 does not properly validate WeChat webhook requests, as its signature check always passes, and it discloses the generated login code in the webhook response. This allows an unauthenticated attacker to forge a login event for any existing username, read the...

CVE-2026-13597

CVE-2026-13597 affects the WordPress plugin for 微信二维码登陆 (QR code login) versions

EUVD-2026-45187

Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...

CVE-2026-14503 pCloud WP Backup <= 2.0.3 - Missing Authorization on the 'start_backup' AJAX Method to Authenticated (Subscriber+) Arbitrary File Read

The pCloud WP Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.3 via the wp2pclajaxprocessrequestinner. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract force generation of a...

PT-2026-60778

Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...