CVE-2026-104956 Plane: Unauthenticated ORM field-name injection via `group_by`/`sub_group_by` on public deploy boards (DoS + blind oracle)

Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts groupby and subgroupby query parameters and passes them without an allowlist to grouped paginators, where they are used as ORM field names by Ffield, .valuesfield, .orderbyfield, an...

CVE-2026-104956 Plane: Unauthenticated ORM field-name injection via `group_by`/`sub_group_by` on public deploy boards (DoS + blind oracle)

Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts groupby and subgroupby query parameters and passes them without an allowlist to grouped paginators, where they are used as ORM field names by Ffield, .valuesfield, .orderbyfield, an...

EUVD-2026-92480

Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts groupby and subgroupby query parameters and passes them without an allowlist to grouped paginators, where they are used as ORM field names by Ffield, .valuesfield, .orderbyfield, an...

CVE-2026-41089-LongLogon

LongLogon · CVE-2026-41089 LongLogon هو فحص مسبق غير مصادق عليه وغير مدمر لـ CVE-2026-41089 ، وهو تجاوز سعة المخزن المؤقت للمكدس قبل المصادقة في خدمة Netlogon في ويندوز. بدون بيانات اعتماد، وبدون إرسال التجاوز، يبلغ عما إذا كان اسم نطاق DNS لوحدة تحكم المجال طويلًا بما يكفي لتعطل الخلل. هل يعمل...

CVE-2021-38699

CVE-2021-38699 TastyIgniter 3.0.7 تسمح بـ XSS عبر حقل الاسم أثناء إنشاء حساب المستخدم. توجد ثغرة تخزينية لتنفيذ البرمجة النصية عبر المواقع Stored Cross Site Scripting في صفحات متعددة من TastyIgniter الإصدار 3.0.7، مما يسمح بتنفيذ جافاسكريبت بشكل اعتباطي. https://vulners.com/cve/CVE-2021-38699...

CVE-2026-42758

CVE-2026-42758 CVE-2026-42758 WebinarIgnition Exploit أمثلة الاستخدام الاستخدام الأساسي python3 exploit.py https://target.example.com -e [email protected] تحديد صفحة الندوة عبر الإنترنت python3 exploit.py https://target.example.com -e [email protected] -w...

CVE-2023-39063

CVE-2023-39063 يحتوي هذا المستودع على استغلال للثغرة CVE-2023-39063 الموجودة في برنامج RaidenFTPD الإصدار v2.4.4005. تم إنشاء الاستغلال ليعمل مع Python 3. تفاصيل الاستغلال كود Python 3 لاستغلال ثغرة تجاوز سعة المخزن المؤقت المستندة إلى SEH في RaidenFTPD الإصدار v.2.4.4005. تسمح هذه الثغرة لمهاجم...

liferay-xss-7.2.1GA2-poc-report-CVE-2020-7934

XSS مخزنة مُوثَّقة في LifeRay 7.2.1 GA2 عبر MyAccountPortlet يتم تنفيذها من خلال نتائج البحث في إصدارات LifeRay من 7.1.0 إلى 7.2.1 GA2، تكون حقول الاسم الأول والاسم الأوسط واسم العائلة لحسابات المستخدمين جميعها عرضة لمشكلة XSS مخزنة. يمكن لأي مستخدم تعديل هذه الحقول بحمولة XSS معينة، ويتم تخزينها...

CVE-2022-22909

CVE-2022-22909 الوصف تم العثور على ثغرة أمنية من نوع حقن الكود Code Injection في تطبيق Hotel Druid v3.0.3، يمكن للمهاجم استغلالها لتنفيذ أوامر عن بُعد على الخادم. للاستغلال الناجح، يجب أن يمتلك المهاجم صلاحية إضافة غرفة جديدة. وصف الثغرة الأمنية تحدث الثغرة لأن أسماء الغرف تُخزَّن داخل ملف باسم...

Astra Linux – Vulnerability in exim4

Exim before version 4.95 has a heap-based buffer overflow for the alias list in hostnamelookup in host.c when senderhostname is set...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mailbox: zynq-ipi: fixed error handling when deviceregister fails When deviceregister fails, there are two issues: 1. The name allocated by devsetname is leaked. 2. The parent of the device is not NULL; deviceunregister is...

Astra Linux – Vulnerability in glibc

The Name Service Cache Daemon’s nscd netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. This flaw was introduced in glibc 2.15, when the cache was added to nscd. This vulnerability only exists in the nscd binary...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: initramfs: Avoid filename buffer overflow The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as follows: plaintext 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 +...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fix for the iteration of extrefs during log replay. When calling inodeaddref and processing extrefs, if we jump to the next label, the value of victimname.len is undefined. This occurs because victimname.len wasn’t...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: NTB: Fixed a possible name leak in ntbregisterdevice. If deviceregister fails in ntbregisterdevice, the device name allocated by devsetname should be freed. According to the comment in deviceregister, callers should use putdevice...

Astra Linux – Vulnerability in avahi

A vulnerability was discovered in Avahi. There exists a potentially exploitable assertion in the avahialternativehostname function...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs: Relaxing the assertions when encoding file handles fails Encoding file handles is typically performed by a filesystem method called encodefh, which may fail for various reasons. Legacy users of exportfsencodefh—specifically,...

Astra Linux – Vulnerability in Redis

Redis is an in-memory database that persists data on disk. In Redis 7.0, before version 7.0.12, extracting key names from a command and a list of arguments could, in some cases, trigger a heap overflow, leading to the reading of random heap memory, heap corruption, and potentially remote code...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 has an improper restriction on write operations within the bounds of a memory buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: Client: Fixed a potential Use-after-Free UAF in smb2isnetworknamedeleted. Skipped sessions that are being terminated status == SESEXITING to avoid UAF...