CVE-2025-10035

ماسح CVE-2025-10035 نظرة عامة يوفر هذا المشروع أداة لفحص الأنظمة التي قد تتأثر بـ CVE-2025-10035 ، وهي ثغرة إلغاء تسلسل Deserialization في سيرفليت الترخيص License Servlet في GoAnywhere MFT من Fortra. قد تسمح هذه الثغرة لمهاجم يحمل توقيع استجابة ترخيص مزور بشكل صالح بإلغاء تسلسل كائنات عشوائية يتح...

CVE-2025-67315

किसी भी कर्मचारी को निष्क्रिय करने के लिए CSRF सारांश कर्मचारियों का प्रबंधन कार्यक्षमता क्रॉस-साइट रिक्वेस्ट फॉरजरी CSRF के लिए असुरक्षित है। एक हमलावर लॉग-इन एडमिन को धोखा देकर एक जाली अनुरोध भेज सकता है जो एक कर्मचारी को जैसे, inid=1 एडमिन की जानकारी या सहमति के बिना निष्क्रिय कर देता है। CVSS...

CVE-2026-83551

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

CVE-2026-19806 Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

CVE-2026-19806

The Support Genix WordPress plugin (≤ 1.4.52 ) is vulnerable to Authentication Bypass leading to Administrator Account Takeover via its guest_ticket_login() function and the publicly reachable /sgnix/?p= endpoint. The root cause is a weak site-wide AES-256-CBC encryption key derived from three tw...

MongoBLEED---CVE-2025-14847-POC-

MongoBLEED---CVE-2025-14847-POC- يحتوي هذا المستودع على نسختي من سكربت بايثون لثغرة CVE-2025-14847 MongoBleed الوصف يحاكي السكربت طلبًا ضارًا عن طريق إرسال حقل حجم فك ضغط مزوّر. إذا كان الخادم عرضةً للثغرة، فسيعيد بيانات مجاورة من ذاكرة الكومة. المتطلبات الأساسية Python 3.x وصول شبكي إلى الهدف عل...

WordPress Support Genix plugin <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token vulnerability

Authenticated Subscriber+ Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Support Genix versions = 1.4.52...

watchTowr-vs-Check-Point-CVE-2026-50751

CVE-2026-50751 مولّد أدلة اكتشاف Detection Artefact Generator لتجاوز التحقق من الشهادة في بروتوكول IKEv1 لخدمة Check Point للوصول عن بُعد Remote Access VPN. https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e انظر مقالة مدونتنا للتفاصيل التقنية. الاكتشاف في العمل...

Microsoft SharePoint Server - Authentication Bypass (ToolShell)

Microsoft Office SharePoint Server contains an improper authentication vulnerability that allows unauthorized attackers to perform spoofing over a network. By crafting a POST request to /layouts/15/ToolPane.aspx with a forged Referer header /layouts/SignOut.aspx, attackers can bypass authenticati...

CVE-2017-9606

CVE-2017-9606 Aufgrund unzureichender Prüfung von Integrität, Authentizität und geringer Benutzerrechte auf den Update-Ordner kann ein lokaler Benutzer gefälschte ViPNet-Update-Dateien mit beliebigem ausführbarem Code erstellen und sie im ViPNet-Update-Ordner platzieren. Nach dem Platzieren der...

CVE-2026-81694

openssl-encrypt (pip package, versions ≤ 1.4.8) is vulnerable to output injection in the verify-usb command. Filenames read from untrusted drive data—residing outside the AES-GCM authenticated manifest —are printed without sanitization, allowing an attacker to plant terminal cursor-movement and e...

CVE-2026-81694 verify-usb before 1.4.9 Output Injection via Unsanitized Filenames

openssl-encrypt pip package, versions = 1.4.8 fails to sanitize filenames read from untrusted drive data outside the AES-GCM authenticated manifest before printing them in the verify-usb command's output. An attacker can plant filenames containing terminal cursor-movement and erase-line control...

EUVD-2026-67050

openssl-encrypt pip package, versions = 1.4.8 fails to sanitize filenames read from untrusted drive data outside the AES-GCM authenticated manifest before printing them in the verify-usb command's output. An attacker can plant filenames containing terminal cursor-movement and erase-line control...

CVE-2026-81694 verify-usb before 1.4.9 Output Injection via Unsanitized Filenames

openssl-encrypt pip package, versions = 1.4.8 fails to sanitize filenames read from untrusted drive data outside the AES-GCM authenticated manifest before printing them in the verify-usb command's output. An attacker can plant filenames containing terminal cursor-movement and erase-line control...

CVE-2026-80210 FrontAccounting through 2.4.20 Cross-Site Request Forgery on Financial Transaction Forms

FrontAccounting through 2.4.20 generates a CSRF token in endform in includes/ui/uicontrols.inc and embeds it as the token hidden field in every form it renders, but only admin/users.php and admin/changecurrentuserpassword.php call checkcsrftoken to validate it. No financial transaction handler...

CVE-2026-80210

FrontAccounting through 2.4.20 suffers from a Cross-Site Request Forgery (CSRF) flaw in its financial transaction forms. The application generates a CSRF token in end_form() (includes/ui/ui_controls.inc) and embeds it as the _token hidden field, but only admin/users.php and admin/change_current_u...

CVE-2026-77035

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035

Joomla Event Manager (joomlaeventmanager.net) versions prior to 5.0.1 are affected by a cross-user event and venue takeover vulnerability. A registered user with edit-own rights (via the eventowner=1 setting or core.edit.own permission) can forge form fields by POSTing another user's record ID to...

EUVD-2026-66863

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...