fisy-fuzz

FIle SYstem - FUZZer هذا هو الإطار الكامل لاختبار الاختراق fuzzing لنظام الملفات الذي قدمته في مؤتمر Hack in the Box 2020 Lockdown Edition في أبريل. محاضرة المؤتمر محاضرة المؤتمر فيديو واحد مواد المؤتمر الهدف الهدف من هذا الإطار هو اكتشاف ثغرات أمنية في نواة أنظمة UNIX مع تركيز قوي على أنظمة BSD...

CVE-2024-2961

CVE-2024-2961 نص برمجي للتخفيف من المشكلة الأمنية CVE-2024–2961 الوصف يحتوي هذا المستودع على سكربت Bash للتحقق من ثغرة تجاوز سعة المخزن المؤقت buffer overflow المكتشفة في GNU libc glibc الإصدارات 2.39 والأقدم، والمعروفة باسم CVE-2024-2961، والتخفيف من حدتها. تؤثر هذه الثغرة على PHP عند استخدام دا...

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543 — حقن SQL في PHP ext/pgsql عبر كسر E'...' باستخدام الشرطة المائلة العكسية إثبات مفهوم للثغرة CVE-2026-17543 CVSS 9.8 — حرجة، CWE-89، وهي ثغرة حقن SQL في امتداد PostgreSQL الإجرائي في PHP. ملخص الثغرة تمرر الدوال pginsert وpgselect وpgupdate وpgdelete وpgconvert جميعها القيم النصية...

cirro-azcli-ext

cirro-azcli-ext امتداد Azure CLI يجمع بيانات موارد Azure بشكل سلبي في قاعدة بيانات SQLite متوافقة مع مخطط Cirro https://github.com/bishopfox/cirro. كما يسجّل جميع استدعاءات CLI في ملف JSON-lines. يرتبط بـ knack events: EVENTINVOKERPOSTPARSEARGS — يسجّل وسائط الأوامر EVENTINVOKERFILTERRESULT — يكت...

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py ماسح Python خفيف الوزن لثغرة CVE-2023-48795 — ثغرة Terrapin لاقتطاع البادئة في بروتوكول SSH. Terrapin هي ثغرة على مستوى البروتوكول في SSH تتيح لمهاجم يقوم بهجوم رجل-في-الوسط MitM نشط اقتطاع معلومات الامتدادات المُتفاوَض عليها، مما يخفض من أمان الاتصال — والأخطر أنها تعطّل ext-inf...

PT-2026-79736

In the Linux kernel, the following vulnerability has been resolved: sched ext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before scx link sched links the sched into the hierarchy, e.g. when the parent is already being disabled, and cleanup still runs...

PT-2026-79598

In the Linux kernel, the following vulnerability has been resolved: sched ext: Take cgroup lock first in scx cgroup lock scx cgroup lock write-locks scx cgroup ops rwsem and then takes cgroup lock, which can deadlock through kernfs: scx enable/disable cgroup rmdir cpu.weight write...

RockyLinux 8 : php:8.2 (RLSA-2026:57574)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:57574 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archiv...

php8.4 security, bug fix, and enhancement update

An update is available for php8.4. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PHP is an HTML-embedded scripting language. PHP attempts to make it easy for...

RLSA-2026:56969 Important: php8.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

php:8.3 security, bug fix, and enhancement update

An update is available for module.php-pecl-redis6, php, module.php-pecl-rrd, php-pecl-apcu, module.php-pecl-apcu, php-pecl-zip, php-pecl-rrd, module.php, module.php-pecl-zip, php-pecl-redis6, php-pecl-xdebug3, module.php-pecl-xdebug3. This update affects Rocky Linux 9. A Common Vulnerability...

RLSA-2026:57539 Important: php:8.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archives CVE-2026-7260 Bug Fixes and Enhancements...

php: ext-pgsql: PHP: SQL injection via improper backslash escaping

A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...

Important: Red Hat Security Advisory: php:8.3 security, bug fix, and enhancement update

An update for the php:8.3 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: php:8.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archives CVE-2026-7260 Bug Fixes and Enhancements...

RockyLinux 10 : php8.4 (RLSA-2026:56969)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56969 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Arbitrary code execution via out-of-bounds write in bccomp...

Important: php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archives CVE-2026-7260 Bug Fixes and Enhancements...

RockyLinux 9 : php:8.3 (RLSA-2026:57539)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:57539 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archiv...

php: ext-pgsql: PHP: SQL injection via improper backslash escaping

A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...

Important: Red Hat Security Advisory: php8.4 security, bug fix, and enhancement update

An update for php8.4 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...