CVE-2010-3971-hotpatch

CVE-2010-3971-hotpatch अपने स्वयं के सुरक्षा हॉटफिक्स को Deviare के साथ बनाएं। मूल लेख: Deviare का उपयोग करके एक अस्थायी ज़ीरो डे पैच बनाना...

EUVD-2026-92488

Plane is an open-source project management tool. Prior to 1.4.0, two endpoint families fail to verify that nested resource identifiers belong to the workspace and project named in the URL. An authenticated user can read or modify estimates from another workspace through PATCH...

CVE-2026-104955 Plane: Project Member can escalate Project Guest to Member via PATCH /project-members/{pk} (BAC / Privilege Escalation)

Plane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request to the project-member update endpoint at /api/workspaces/workspaceslug/projects/projectid/members/memberpk/ to change another user's project role. The role-update logic blocks...

CVE-2026-104955

The open-source project management tool Plane is vulnerable to Broken Access Control and Privilege Escalation prior to version 1.4.0 . An attacker with a Project Member role (role 15) can send a PATCH request to the /api/workspaces/{workspace_slug}/projects/{project_id}/members/{member_pk}/ endpo...

CVE-2026-104955 Plane: Project Member can escalate Project Guest to Member via PATCH /project-members/{pk} (BAC / Privilege Escalation)

Plane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request to the project-member update endpoint at /api/workspaces/workspaceslug/projects/projectid/members/memberpk/ to change another user's project role. The role-update logic blocks...

CVE-2026-104955 Plane: Project Member can escalate Project Guest to Member via PATCH /project-members/{pk} (BAC / Privilege Escalation)

Plane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request to the project-member update endpoint at /api/workspaces/workspaceslug/projects/projectid/members/memberpk/ to change another user's project role. The role-update logic blocks...

EUVD-2026-92476

Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user to retrieve API-token records, while PATCH /api/users/api-tokens/tokenid/ allows the user to modify the token's allowedratelimit field without server-side validation or a maxim...

CVE-2026-104893

The project management tool Plane is vulnerable to improper validation in its API. Prior to version 1.4.0 , an authenticated user can use the PATCH /api/users/api-tokens/{token_id}/ endpoint to modify the allowed_rate_limit field without server-side validation or a maximum limit. This allows an a...

CVE-2026-104893 Plane: Improper validation allows arbitrary modification of API token rate limits

Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user to retrieve API-token records, while PATCH /api/users/api-tokens/tokenid/ allows the user to modify the token's allowedratelimit field without server-side validation or a maxim...

CVE-2026-104893 Plane: Improper validation allows arbitrary modification of API token rate limits

Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user to retrieve API-token records, while PATCH /api/users/api-tokens/tokenid/ allows the user to modify the token's allowedratelimit field without server-side validation or a maxim...

CVE-2022-39197-fix_patch

CVE-2022-39197-fixpatch उपयोग cobaltstrike प्रारंभ करते समय पैरामीटर जोड़ें -javaagent:fixXss-1.0-SNAPSHOT.jar...

SpringBreakVulnerableApp

स्प्रिंग ब्रेक कमजोर एप्लिकेशन यह स्प्रिंग ब्रेक कमजोरी CVE-2017-8046 के लिए exploit परीक्षण करने हेतु एक कमजोर एप्लिकेशन है। चेतावनी! इस एप्लिकेशन में गंभीर सुरक्षा कमजोरियाँ हैं। इसे अपने जोखिम पर चलाएँ! अनुशंसा की जाती है कि बैकअप और संरक्षित वातावरण जैसे कि हालिया स्नैपशॉट और होस्ट-ओनली...

CVE-2020-8209

उपयोग विधि और अस्वीकरण यह स्क्रिप्ट Citrix XenMobile निर्देशिका ट्रैवर्सल भेद्यता CVE-2020-8209 के बैच जांच के लिए है। उपयोग विधि: Python CVE-2020-8209-Multiple.py url.txt भेद्यता वाले पतों को vul.txt में आउटपुट किया जाता है। प्रभावित संस्करण: Citrix XenMobile Server 10.12, RP2 से पहले Citrix...

CVE-2026-67276

CVE-2026-67276 التبرع ساعد في صيانة هذا المشروع إذا وجدت هذا المشروع مفيدًا، يرجى التفكير في دعم صيانته المستمرة عبر PayPal أو ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ عشرة بالمئة من كل تبرع تُساهم به يُمنح لمستشفى كانثا بوفا للأطفال. | اختر طريقة...

ROOT-OS-DEBIAN-11-CVE-2026-27456 CVE-2026-27456 in util-linux - Patched by Root

Root has patched CVE-2026-27456 in the util-linux package for Root:Debian:11. Multiple fixed versions available...

itscape

ITScape — موقع تتبّع ثغرة الهروب من الضيف إلى المضيف في Linux KVM/arm64 مصدر متتبّع حالة التصحيحات ITScape : موقع من صفحة واحدة يوثّق التوزيعات التي أصدرت إصلاحًا لثغرة الهروب من الضيف إلى المضيف في نواة لينكس لأنظمة KVM/arm64. أين توجد الحقائق كل ما يخص الثغرة — معرّفات CVE، الإصدارات المتأثرة...

pintheft

PinTheft — موقع تتبّع ثغرة RDS zerocopy double-free LPE مصدر متتبّع حالة التصحيحات الخاص بـ PinTheft: موقع من صفحة واحدة يوثّق أي توزيعات Linux قامت بنشر إصلاح لثغرة تصعيد الامتيازات RDS zerocopy double-free في نواة Linux. أين توجد الحقائق كل ما يتعلق بالثغرة — معرّفات CVE، والإصدارات المتأثرة...

cifswitch

CIFSwitch — موقع تتبّع LPE من نوع key-origin في CIFS عبر cifs.spnego مصدر متتبّع حالة التصحيحات CIFSwitch : موقع من صفحة واحدة يرصد أيّ التوزيعات أصدرت إصلاحًا لثغرة تصعيد الامتيازات من نوع key-origin في cifs.spnego الخاصة بـ CIFS داخل نواة Linux. أين توجد الحقائق كل ما يخص الثغرة — معرّفات CVE،...

ROOT-APP-MAVEN-CVE-2026-22741 CVE-2026-22741 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22741 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: btrfs: The abort logic in btrfsreplacefileextents has been fixed. Error injection testing uncovered a case where a corrupt file system could occur, with an missing extent in the middle of a file. This occurs because the if...