CVE-2023-4696

CVE-2023-4696 الاستيلاء على الحساب بسبب التعامل غير السليم مع رموز JWT في memos v0.13.2 الوصف أريد تسليط الضوء على ثغرة أمنية كبيرة اكتشفتها مؤخرًا في نظام usememos/memos. هذه الثغرة قد تسمح لأي مستخدم بتعديل بيانات مستخدم آخر، بما في ذلك كلمة المرور الخاصة به، بسهولة نسبية. من خلال استغلال هذا...

CVE-2026-43499

CVE-2026-43499 ملاحظات الاستغلال الخطورة: HIGH CVSS: 7.8 التأثير: السرية، النزاهة، التوفر نُشر: 2026-05-21 الملخص الفني CVE-2026-43499 هي ثغرة أمنية داخل نواة لينكس Linux kernel، تؤثر تحديدًا على مكوّن rtmutex المسؤول عن إدارة أقفال المزامنة في الوقت الفعلي. تنشأ هذه الثغرة من معالجة غير صحيحة...

CVE-2025-6713

CVE-2025-6713 إنشاء خط أنابيب تجميع للوصول إلى البيانات دون إذن مناسب بسبب معالجة غير صحيحة لـ $mergeCursors في MongoDB v8.0 v7.0 v6.0 6.0.22 التثبيت ليس صعبًا جدًا - فقط استخدم pip3 لتثبيت المتطلبات: pip install -r requirements الاستخدام root@kitploit: python3 CVE-2025-6713 التجريب ما يجب فعله...

CVE-2025-8110

CVE-2025-8110 معالجة غير صحيحة للروابط الرمزية في واجهة برمجة تطبيقات PutContents في Gogs تسمح بتنفيذ التعليمات البرمجية محليًا. كيف تعمل طريقة الكشف هذه؟ يستخرج إصدار Gogs من التذييل في /user/login عبر التعبير العادي Gogs Version: X.X.X ويصنف الإصدارات التي تعمل بالإصدار 0.13.3 أو ما قبله على أن...

CVE-2026-19653

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations...

EUVD-2026-62661

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations...

CVE-2026-17084

The "stringprep" module didnt process characters from RFC 3454 tables...

The vulnerability of the ceph kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the ceph kernel component in the Linux operating system is related to improper handling of the absence of a specific element. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the btrfs/tree-log.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the btrfs/tree-log.c component in the Linux operating system’s kernel is related to improper handling of conflicting special elements. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2026-54939

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a relationship to a record they cannot name, and to recover the secret value used to look it up. When managerelationship is used with onlookup: :relate on a belongsto...

CVE-2026-48323

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

EUVD-2026-51018

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

CVE-2026-48586

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

UBUNTU-CVE-2026-49158

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

EUVD-2026-49182

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

CVE-2026-56537

HCL Connections is affected by CVE-2026-56537, a information disclosure vulnerability caused by improper handling of request data. The issue is labeled as a LOW-severity concern (CVSS v3.1: 3.5) with network attack vector, low attack complexity, and user interaction required. It could allow an au...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Handling of Structural Elements (CVE-2026-23154)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505600; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

PT-2026-64899

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

PT-2026-64883

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper handling of highly compressed data, known as data amplification, exists in the Apache Thrift Ruby bindings. This issue occurs during ZLIB decompression within the THeaderTransport...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Handling of Structural Elements (CVE-2026-43033)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505632; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...