CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089: Critical Windows Netlogon RCE Unauthenticated Remote Code Execution on Active Directory Domain Controllers 🧠 Conceptual Overview I am publishing this technical breakdown of CVE-2026-41089 , an exceptionally critical vulnerability residing deep within the Windows Netlogon service...

CVE-2026-42533

CVE-2026-42533 — استغلال PoC لتجاوز سعة المخزن المؤقت في الكومة لخادم nginx تنفيذ برمجي عن بُعد قبل المصادقة عبر إتلاف الالتقاط ثنائي المرور تم إصدار PoC العام في 2026-07-27 — لا تنتظر، حدّث الآن. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 حرجة النوع| تجاوز سعة المخزن المؤقت في الكومة CWE-122...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

CVE-2021-3064

CVE-2021-3064: Dépassement de tampon à distance Pan-OS + Contrebande HTTP Exploit Cet exploit utilise une vulnérabilité de contrebande HTTP pour délivrer une charge utile à un point de terminaison autrement inaccessible sur les pare-feu Pan-OS ; le point de terminaison est vulnérable à un...

CVE-2026-21045_and_CVE-2026-21048

CVE-2026-21045 و CVE-2026-21048 — إثبات مفهوم PoC لكتابة خارج الحدود في مكتبة Samsung libimagecodec.quram.so نظرة عامة يحتوي هذا المستودع على ملفات إثبات مفهوم PoC توضح ثغرات الكتابة خارج الحدود OOB في مكتبة ترميز الصور Quramsoft libimagecodec.quram.so المستخدمة على أجهزة Samsung التي تعمل بنظام...

CVE-2026-74664

A flaw was found in the Linux kernel's Open vSwitch component. When processing flow updates, the ovsflowcmdnew function preallocates a reply buffer based on the request's flow identifier. If a shorter User Flow ID UFID is provided, but the system matches an existing flow with a longer key...

CVE-2026-74729

A flaw was found in the Linux kernel's Aspeed Low Pin Count LPC snoop driver. This vulnerability arises from a lack of synchronization during concurrent access to a kernel First-In, First-Out kfifo buffer. A local attacker could exploit this by triggering a race condition, leading to a usercopy...

nginx-rift-private-lab

NGINX Rift Preuve de concept d'exécution de code à distance RCE pour CVE-2026-42945 , un débordement de tas critique dans le ngxhttprewritemodule de NGINX introduit en 2008. Ce bug permet une exécution de code à distance sans authentification sur les serveurs utilisant les directives rewrite et...

ROOT-OS-DEBIAN-13-CVE-2026-61857 CVE-2026-61857 in imagemagick - Patched by Root

Root has patched CVE-2026-61857 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-56372 CVE-2026-56372 in imagemagick - Patched by Root

Root has patched CVE-2026-56372 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61861 CVE-2026-61861 in imagemagick - Patched by Root

Root has patched CVE-2026-61861 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

CVE-2025-55780

CVE-2025-55780 إلغاء مرجعية مؤشر فارغ في دالة عرض EPUB في MuPDF 1.26.4 مرجع CVE - CVE-2025-55780 الإصدارات المتأثرة: الإصدار 1.26.7 وما قبله متأثرة تم اكتشافه واختباره على: 1.26.4 درجة الخطورة CVSSv3 : 7.5 عالية تم الإصلاح في commit :...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

katana

Katana استغلال BootROM لأجهزة Qualcomm التي صدرت بين 2016 و 2019. شرح موجز للاستغلال مع SoC MSM8998 Nazgul، تمت إضافة الأمر 0x13 SAHARARESETSTATEMACHINEID. يستدعي الأمر الدالة bootsaharaentry، التي من المفترض أن تعيد تهيئة Sahara. الخلل هو أن كل استدعاء لها يقلل مؤشر المكدس بمقدار 0x60 ولا يوجد...

ROOT-OS-DEBIAN-13-CVE-2026-5450 CVE-2026-5450 in glibc - Patched by Root

Root has patched CVE-2026-5450 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-5928 CVE-2026-5928 in glibc - Patched by Root

Root has patched CVE-2026-5928 in the glibc package for Root:Debian:13. Multiple fixed versions available...

gosentry

gosentry gosentry est un fork de la chaîne d'outils Go axé sur la sécurité, intégrant de nombreuses fonctionnalités pour des campagnes de fuzzing de pointe sur des codebases Go. Si vous utilisiez go test -fuzz auparavant, vous devriez utiliser gosentry comme remplacement. Il est fourni avec...