CVE-2025-51726

كما طُلب، قمت الآن بعرض كلا الثغرتين BA2022 و BA2015 مع سيناريوهات استغلال عملية ودليل إثبات PoC، مما يوضح كيف يمكن لمهاجم استغلال هذه المشاكل في سياق واقعي. 📌 1. BA2022 تجزئة ضعيفة في توقيع الكود – توضيح استغلال SHA-1 على الرغم من أن الملف الأصلي CyberGhostVPNSetup.exe يظهر كموقّع وموثوق، إلا أن...

CVE-2023-29409

CVE-2023-29409 root@kitploit: $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on...

CVE-2024-4761

CVE-2024-4761 고위험 CVE-2024-4761 익스플로잇 Google은 Chrome 브라우저에서 CVE-2024-4761로 추적되는 고위험 제로데이 취약점 취약점을 해결하기 위해 긴급 보안 업데이트를 배포했습니다. 이 취약점은 Google 웹 브라우저의 V8 JavaScript 엔진에 존재하는 out-of-bounds write메모리 범위를 벗어난 쓰기 문제입니다. CVE-2024-4761 패치 완료 Stable 채널은 Mac 및 Windows용 124.0.6367.207/.208, Linux용...

vulnerabilities present in Microsoft Office

Microsoft has identified vulnerabilities in various Office products. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause damage as described in the following table. For successful exploitation, the malicious individual must deceive the victim into opening ...

CVE-2025-54897-LAB

Lab : CVE-2025-54897 - Vulnérabilité de désérialisation dans Microsoft Office SharePoint 🚀 Présentation Ce lab démontre une vulnérabilité de désérialisation dans Microsoft Office SharePoint qui permet l'exécution de code à distance RCE. Le problème provient d'une gestion inappropriée de données...

CVE-2026-30081

CVE-2026-30081 CVE-2026-30081 a été officiellement publié par MITRE. Aperçu de la vulnérabilité...

Apple-Remote-Crash-Tool-CVE-2018-4407

Apple-Remote-Crash-Tool-CVE-2018-4407 يُعطّل أي جهاز macOS High Sierra أو iOS 11 موجود على نفس شبكة WiFi مجرد أداة صغيرة تستخدم 'ثغرة تجاوز سعة المخزن المؤقت في الكومة' العامة CVE-2018-4407 وتجعل استغلال الشبكات بالكامل أسهل. المتطلبات MacOS Python مثبت Scapy مثبتة pip install scapy الأساسيات يرس...

CVE-2026-31891

Injection SQL dans l'optimiseur d'agrégation MongoLite via toJsonExtractRaw Classe de vulnérabilité : Injection SQL CWE-89 Produit : Cockpit CMS édition Core Version affectée : 2.13.4 et probablement toutes les versions depuis l'introduction de l'optimiseur d'agrégation Image Docker testée :...

HAProxy-Keepalived-Sec-HighLoads

تثبيت وتكوين HAProxy و Keepalived موازن التحميل + المجموعة + الأمان + الأحمال العالية HAProxy هو برنامج مفتوح المصدر يوفر خدمة خادم وكيل proxy لتطبيقات TCP و HTTP مع قدرة عالية على التوافر high availability وموازنة التحميل load balancing. Keepalived هو برنامج مفتوح المصدر قادر على توفير خاصية IP...

trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image...

CVE-2025-60656

CVE-2025-60656 - 首页存储型跨站脚本（XSS）漏洞 | ---|--- 研究人员| DotAdrien 严重程度| 8.5 高危 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N 软件| Script Pag 描述 首页的“Recent Ads”（最新广告）模块存在存储型跨站脚本（XSS）漏洞。图片 URL 字段未能对双引号（）进行过滤。攻击者可注入类似 的载荷，当任何用户访问首页时便会触发。...

CVE-2023-42362

CVE-2023-42362 作者：Abdelrahman Mohamed Mr-n0b3dy Linked-in：https://www.linkedin.com/in/abdelrhman-mohamed-ashraf-7bb43410b/ 漏洞名称：不受限制的文件上传，导致账户接管（ATO） 严重性：高危 产品：NCR teller web app 版本：4.4.0 描述： 不受限制的文件上传导致存储型跨站脚本（XSS）漏洞是此 Web 应用程序中发现的一个安全问题。该漏洞源于文件上传功能缺乏适当的输入验证。 影响：...

Lokomedia CMS - Local File Inclusion

A Local File Inclusion LFI vulnerability exists in Lokomedia CMS. The application allows an attacker to include files on the server that should not be accessible, potentially exposing sensitive information. id: CVE-2010-2018 info: name: Lokomedia CMS - Local File Inclusion author: r3Y3r53 severit...

Duplicate Page WordPress - Stored Cross-Site Scripting

Duplicate Page WordPress plugin = 4.4.2 contains a stored cross-site scripting caused by unsanitized Duplicate Post Suffix settings in output, letting high privilege users execute malicious scripts, exploit requires high privilege user role. id: CVE-2021-24681 info: name: Duplicate Page WordPress...

LearnPress < 4.2.5.5 - Cross-Site Scripting

The LearnPress WordPress plugin before 4.2.5.5 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-5558 info: name: LearnPress 4.2.5.5 - Cross-Site...

GL.iNET SSID Key Disclosure

An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key. id: CVE-2023-31478 info: name: GL.iNET SSID Key Disclosure author: DhiyaneshDK severity: high description: | An issue was discovered on GL.iNet...

reNgine 2.2.0 - Command Injection

reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/wafdetector/?url= string. The commands are executed as root via subprocess.checkoutput. id: CVE-2023-50094 info: name: reNgine 2.2.0 - Command Injection...

Themes Coder Ecommerce <= 1.3.4 - SQL Injection

The Themes Coder Ecommerce WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. id: CVE-2024-13726 info: name: Themes Coder Ecommerce = 1.3.4 - SQL...

WordPress TS Poll < 2.4.0 - SQL Injection

WordPress TS Poll plugin 2.4.0 contains a SQL injection caused by lack of sanitization and escaping of a parameter before using it in a SQL statement, letting attackers perform SQL injection attacks, exploit requires admin privileges. id: CVE-2024-8625 info: name: WordPress TS Poll 2.4.0 - SQL...

Oracle Retail Xstore Suite - Pre-authenticated Path Traversal

Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications component: Security. Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...