CVE-2021-42013

CVE-2021-42013 المساهم 석은호@eunho87 CVE-2021-42013 تجاوز المسار في Apache HTTP Server ملخص الثغرة يوجد خلل في معالجة تسوية المسار Path Normalization في Apache HTTP Server 2.4.50، مما يسمح بقراءة ملفات عشوائية أو تنفيذ تعليمات برمجية عن بُعد دون مصادقة. نشأت هذه الثغرة بسبب تصحيح غير مكتمل لـ...

opentsdb_key_cmd_injection

opentsdbkeycmdinjection استغلال لثغرة حقن أوامر في OpenTSDB = 2.4.1 CVE-2023-36812/CVE-2023-25826 مكتوب بلغة Fortran نبذة هذا استغلال لثغرة حقن أوامر في إصدارات OpenTSDB 2.4.1 وما قبلها CVE-2023-36812/CVE-2023-25826. الاستغلال مكتوب بلغة Fortran الحديثة ويستعين بمكتبة http-client الرسمية للغة...

Mirth-Connect-CVE-2023-43208

CVE-2023-43208: NextGen Mirth Connect में अप्रमाणित दूरस्थ कोड निष्पादन RCE यह शोषण Mirth Connect के XStream इंजन में एक गंभीर डिसीरियलाइज़ेशन कमज़ोरी का लाभ उठाता है। यह CVE-2023-37679 के अधूरे पैच से उत्पन्न होता है, और 4.4.1 से पहले के सभी संस्करणों में अप्रमाणित मनमाना कोड निष्पादन सक्षम करता...

CVE-2026-32202

शून्य-क्लिक बलात प्रमाणीकरण: एक क्राफ्टेड .lnk वाली फ़ोल्डर देखने पर आइकन रेंडर के दौरान UNC रिज़ॉल्यूशन ट्रिगर होता है, जो पीड़ित को एक हमलावर-निर्देशित आउटबाउंड कनेक्शन में बाध्य करता है जो उनके Net-NTLMv2 क्रेडेंशियल को लीक करता है और रिले को सक्षम करता है। यह CVE-2026-21510 के अधूरे पैच के का...

CVE-2026-26114-Patch

CVE-2026-26114-Patch تصحيح N-day لـ CVE-2026-26114 قبل Microsoft. حيث لم تستطع Microsoft تصحيحها بنسبة 100% في أشهر عديدة. لكن FAC security قامت بذلك...

Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch

Summary GHSA-89gg-p5r5-q6r4 claims the pickle deserialization vulnerability in algofrompickle was fixed in v1.5.2. However, monai/auto3dseg/utils.py has not been modified since 2024-07-12 — 18 months before v1.5.2 was released 2026-01-29. All three pickle.loads calls remain unchanged. The fix was...

CVE-2026-47233 Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024

Admidio is an open-source user management solution. Version 5.0.9 added a missing isAdministratorInventory gate to case 'itemdelete': in modules/inventory.php. The same fix was not applied to the sibling case 'fielddelete': handler, which destroys an entire inventory field definition, cascading t...

CVE-2026-48048 XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the LiveTableResults, it is still possible to...

CVE-2026-19429

CVE-2026-19429 relates to Jenkins FilePath.untarFrom() where TAR extraction does not validate tar entry symlink targets, allowing an authenticated user with Item/Configure privileges to create workspace symlinks that point to arbitrary files on the Jenkins controller. This can enable reading sens...

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556...

CVE-2026-18577

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1...

CVE-2026-18577 Incomplete patch leads to administrative account takeover

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1...

VulnCheck KEV: CVE-2026-18577

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1...

PYSEC-2026-1950 Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization

A critical deserialization vulnerability exists in Tendenci Helpdesk module NOTE, by default, Helpdesk is NOT enabled, affecting the version 15.3.11 and earlier. This vulnerability allows remote code execution RCE by an authenticated user with staff security level due to using Python's pickle...

GHSA-7V6W-C3F4-9WPQ OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory

Summary The fix for CVE-2026-40882 addressed only the Velbus asset import handler. The KNX asset import handler KNXProtocol processes user-uploaded ETS project ZIP files through Saxon XSLT and XMLInputFactory.newInstance with no XXE protection, allowing any authenticated user to read arbitrary...

GHSA-FXJ4-P9XP-37V5 HAPI FHIR: Incomplete fix for CVE-2026-45367: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS

Summary The fix for CVE-2026-45367 added RegexTimeout protection to the matches function in DSTU2016MAY, DSTU3, R4, R4B, and R5, but the DSTU2 module was incompletely patched. In org.hl7.fhir.dstu2, replaceMatches was updated while matches at line 2462 still calls the raw String.matchessw without...

Linux Distros Unpatched Vulnerability : CVE-2026-41409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied t...

A Shortcut to Coercion: Incomplete Patch of APT28's Zero-Day Leads to CVE-2026-32202

...

FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426)

A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function apigenerate of the component Worker API Endpoint. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed publicly and may be...

GHSA-5H65-JX66-J7P5 FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426)

A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function apigenerate of the component Worker API Endpoint. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed publicly and may be...