Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in passwords in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in curl

When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname, but the...

Astra Linux – Vulnerability in the 389-DS-base

A flaw was discovered in the ‘deref’ plugin of 389-ds-base, where it could use the ‘search’ permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes...

Astra Linux – Vulnerability in sudo

In Sudo version 1.8.29, the fact that a user has been blocked for example, by using the “!” character in the shadow file instead of a password hash was not taken into consideration. This allows an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in the 389-DS-base

A flaw has been discovered in 389-ds-base versions 1.4.x.x prior to 1.4.1.3. When executed in verbose mode, the dscreate and dsconf commands may display sensitive information, such as the Directory Manager password. An attacker who can view the screen or record the terminal’s standard error outpu...

Astra Linux – Vulnerability in Chromium

The incorrect security user interface in the Password section of Google Chrome prior to version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users’ passwords, allowing for full domain takeover...

Astra Linux – Vulnerability in cifs-utils

It was discovered that cifs-utils’ mount.cifs function invoked a shell when requesting the Samba password, which could be exploited to inject arbitrary commands. An attacker who had special permissions, such as those through sudo rules, could use this vulnerability to escalate their privileges...

Astra Linux – Vulnerability in wpa

Implementations of EAP-pwd in hostapd before version 2.10 and wpasupplicant before version 2.10 are vulnerable to side-channel attacks due to cache access patterns. NOTE: This issue exists because of an incomplete fix for CVE-2019-9495...

Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232

Digisol-DG-GR1321 - تخزين كلمات المرور بنص واضح - CVE-2024-4232...

CVE-2020-25078

CVE-2020-25078 تعليمات الاستخدام التعليمات ضع عنوان URL الخاص بالهجوم في نفس الدليل مع ip.txt ضع عنوان IP الخاص بالهجوم في نفس الدليل مع ip.txt سجل الطرفية root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128...

KeePass-dump-py

KeePass-dump-py محاولتي لإعادة كتابة أداة تفريغ كلمة المرور الرئيسية لـ KeePass 2.X CVE-2023-32784 POC الأصلية بلغة بايثون. يرجى التوجه إلى الـ POC الأصلي لمزيد من التفاصيل حول الثغرة وعملية الاستغلال. ما يفعله هذا السكريبت: 1. يتحقق مما إذا كانت عملية KeePass قيد التشغيل، وإلا فسيقوم بتشغيل...

CVE-2019-9053-port-py3

CVE-2019-9053 Exploit - Python 3 Il s'agit d'un portage en Python 3 de l'exploit CVE-2019-9053, qui cible CMS Made Simple CMSMS dans les versions antérieures à 2.2.10. La vulnérabilité permet une injection SQL via l'interface du module News. Exemple de sortie Testé sur le TryHackMe Simple CTF...

CVE-2018-13341

CVE-2018-13341 تهدف هذه الأداة إلى استغلال الثغرة CVE-2018-13341، وذلك باستخدام عنوان MAC للجهاز المستهدف، يمكنك استعادة كلمة مرور الحساب المخفي "crengsuperuser" الذي يتمتع بصلاحيات مرتفعة ويسمح لك بتنفيذ أوامر SUDO الجذر. يمكن الاتصال ببروتوكول Crestron Toolbox Protocol CTP عبر المنفذ 41795 على...

CVE-2017-13872-Patch

CVE-2017-13872-Patch قم بتنزيل هذا البرنامج وتشغيله، ثم سيطلب منك كلمة مرور جديدة لمستخدم الجذر. قد تكون كلمة المرور مختلفة، لكن أعتقد أن الخيار الافتراضي يساوي كلمة مرور المسؤول. التحديث يمكنك تصحيح الخطأ عن طريق ترقية نظام التشغيل لديك...

CVE-2525-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7

CVE-2025-25748-Vulnérabilité-de-Cross-Site-Request-Forgery-CSRF-dans-HotelDruid-3.0.7 Description Une vulnérabilité de Cross-Site Request Forgery CSRF dans le point d'accès gestioneutenti.php de HotelDruid 3.0.7 permet aux attaquants d'effectuer des actions non autorisées par exemple, modifier le...

CVE-2024-57429

CVE-2024-57429 ثغرة أمنية من نوع تزوير الطلب عبر المواقع CSRF في دالة pjActionUpdate ضمن نظام حجز السينما PHPJabbers v2.0 تسمح للمهاجمين عن بُعد بتصعيد الصلاحيات عن طريق خداع مدير موثوق لإرسال طلب غير مصرح به. التأثير: استغلال هذه الثغرة CSRF يمكن أن يؤدي إلى إجراءات غير مصرح بها، مثل: تغيير كلمة...