CVE-2025-47812

CVE-2025-47812 أدى التحقق غير السليم من الإدخال إلى تنفيذ تعليمات برمجية عن بُعد واختراق كامل للنظام 📘 مقدمة: اكتشف جوليان أهرنس من RCE Security ثغرة أمنية حرجة تؤثر على WingFTP. تُعرف باسم CVE-2025-47812، ولها درجة CVSS تبلغ 10. قد يسمح الاستغلال الناجح للثغرة لمهاجم بعيد غير مصادَق بتنفيذ تعليم...

-CVE-2025-8088

-CVE-2025-8088 जाँचने के लिए PowerShell स्क्रिप्ट कि आपका डिवाइस प्रभावित है या नहीं 🚨 CVE-2025-8088: WinRAR ज़ीरो-डे अलर्ट! 🚨 WinRAR की एक गंभीर भेद्यता CVE-2025-8088 सुर्खियों में है – हमलावर 7.13 से पुराने संस्करणों में इस कमज़ोरी का फायदा उठाकर उपयोगकर्ताओं को एक क्राफ्टेड आर्काइव खोलने के लि...

CVE-2019-11043

CVE-2019–11043: PHP-FPM Nginx रिमोट कोड निष्पादन भेद्यता भेद्यता विवरण और प्रभाव CVE-2019–11043 एक रिमोट कोड निष्पादन RCE भेद्यता है। यह PHP-FPM को प्रभावित करती है, जो एक FastCGI प्रक्रिया प्रबंधक है जो आमतौर पर Nginx वेब सर्वर के साथ उपयोग किया जाता है। यह दोष Nginx कनेक्शन के माध्यम से अनुरोधो...

CVE-2024-21545-PoC

CVE-2024-21545-PoC Proxmox VE Arbitrary File Read - Full System Compromise . Not Testeted yet... will test them this week...

CVE-2025-26264

CVE-2025-26264 CVE-2025-26264 - يحتوي GeoVision GV-ASWeb بإصدار 6.1.2.0 أو أقل على ثغرة تنفيذ التعليمات البرمجية عن بُعد Remote Code Execution - RCE ضمن ميزة إعدادات الإشعارات Notification Settings. يمكن لمهاجم مُصادق يتمتع بصلاحيات "إعدادات النظام" System Settings في ASWeb استغلال هذا الخلل لتنف...

CVE-2025-53770

CVE-2025-53770 यह CVE-2025-53770 बिना प्रमाणीकरण के RCE भेद्यता के लिए एक बहु-साइट स्कैनर है। अन्य स्कैनर/PoC:- https://github.com/hazcod/CVE-2025-53770 https://github.com/MuhammadWaseem29/CVE-2025-53770 CVE-2025-53770 SharePoint RCE प्रभाव: बिना प्रमाणीकरण वाले हमलावर रिमोट कोड निष्पादन प्राप्त ...

CVE-2025-42957-SAP-S-4HANA-Under-Siege

CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – क्या हुआ? अगस्त 2025 में, SAP के प्रमुख ERP प्लेटफ़ॉर्म S/4HANA में एक RFC-सक्षम फ़ंक्शन मॉड्यूल में कमज़ोरी पाई गई। केवल निम्न-विशेषाधिकार low-privileged पहुँच वाले हमलावर उस मॉड्यूल में मनमाना ABAP कोड इंजेक्ट कर सकते हैं, सामान्य प्राधिकरण जाँचों को...

Malicious code in 3layerdipstackc6c5kn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5095fa04b6e4feb276e9a1376a4b4c7644115b5ffc5021f55edbf5c5646d2c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14385 Malicious code in hydration-dim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3659ec02e8317602c089b822a4a0533bee515d9666d07fdaf3cdf8b315a46147 On import, dist/index.mjs verifies a SHA-256 digest of a bundled Linux x8664 ELF at dist/internal/calc.dat, chmods it to 0755, and spawns it detached...

Malicious code in @pablo_clueless/printr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ba2a3695f8d0fa63fb6558e66660f1e3b4a6f4eb080b86c486daae6f55102b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14329 Malicious code in @pablo_clueless/printr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ba2a3695f8d0fa63fb6558e66660f1e3b4a6f4eb080b86c486daae6f55102b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14321 Malicious code in test-flow-entire7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac2aa8c9e03f819fc35f4abe8554abf07333c68617df6a2f844d11bb3374594 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-14947

A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of...

CVE-2026-14947

FDS102 for FAdC/FAdCi R2 by Frauscher Sensortechnik fails to validate ZIP entry paths, allowing a high-privileged remote attacker to inject directory traversal sequences (../) and write files to arbitrary locations, potentially achieving arbitrary code execution and full system compromise. CVSS 3...

CVE-2026-14946 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious configuration file.

A high privileged remote attacker can upload a .php file and then request it directly from /uploads/.php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise...

Malicious code in bunnyhijack-test-0x00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652b21307c316c7a3237991fdfb6dc4d43716997a91268f43fe9c9c65a3fd76e package.json declares "bin": "node": "./shim.js" , which causes npm to place a node executable into nodemodules/.bin. Since nodemodules/.bin is...

CVE-2026-71052

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Web Services Security. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile...

CVE-2026-70954

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform...

CVE-2026-70865

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTPS to compromise Oracle Application Testing Suite...

CVE-2026-70737

Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager component: Storage Server Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...