CVE-2024-24919

أداة استغلال RCE لبوابة Check Point الأمنية CVE-2024-24919 نظرة عامة يحتوي هذا المستودع على أداة لاستغلال ثغرة CVE-2024-24919 في بوابات Check Point الأمنية. الأداة عبارة عن ماسح متعدد يمكنه تحديد الأجهزة المعرضة للخطر، كما تعمل كأداة استغلال ضد هدف واحد للسيطرة الكاملة على الجهاز المصاب...

WordPress SiteOrigin Widgets Bundle plugin <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read vulnerability

Authenticated Contributor+ Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin SiteOrigin Widgets Bundle versions = 1.74.3...

WordPress Post Export Import with Media plugin <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Administrator+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin Post Export Import with Media versions = 1.17.1...

CVE-2026-107821

The MariaDB server is vulnerable to an issue where it insufficiently validates counts, offsets, lengths, and field boundaries within FRM metadata when opening binary FRM files. Affected versions include 10.6.1 to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. An attacker capable of placi...

CVE-2026-107821 MariaDB: insufficient validation of binary frm data when opening a table

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

EUVD-2026-95921

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

CVE-2026-107821 MariaDB: insufficient validation of binary frm data when opening a table

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

CVE-2026-107821 MariaDB: insufficient validation of binary frm data when opening a table

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

ESCepcion

🛡️ ESCepcion Auditeur des services de certificats Active Directory ESCepcion est un outil open source pour l'audit et l'évaluation des vulnérabilités dans les infrastructures Active Directory Certificate Services AD CS. Il est conçu pour automatiser la détection des chemins d'élévation de...

CVE-2026-107816

The MariaDB server contains an out-of-bounds (OOB) read vulnerability in the qc_info plugin affecting versions 10.6.1 through 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. The root cause is that the plugin can be confused by queries containing embedded null bytes . If such a query is ca...

CyBroHttpServer-v1.0.3-Directory-Traversal

CyBroHttpServer-v1.0.3-Directory-Traversal La traversée de répertoire dans CyBroHttpServer v1.0.3 permet à un attaquant de lire des informations sensibles. CVE-2018-16133 https://vulners.com/cve/CVE-2018-16133 Preuve de concept Pour exploiter la vulnérabilité, un attaquant peut envoyer une requêt...

CVE-2026-108158

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then...

CVE-2018-3760

CVE-2018-3760 ثغرة اجتياز الدليل في Rails Asset Pipeline اكتشفها Orange Tsai ملاحظة : افتراضيًا، تطبيقات Rails التي تعمل في وضع الإنتاج ليست عرضة لهذا الاستغلال. الاستغلال: curl -v...

CVE-2025-43919-POC

🚨 CVE-2025-43919: اجتياز الدليل في GNU Mailman 2.1.39 cPanel/WHM تم اكتشاف ثغرة جديدة في GNU Mailman 2.1.39 المضمن مع cPanel/WHM، مما يسمح للمهاجمين عن بُعد غير المصادق عليهم بقراءة ملفات عشوائية على الخادم عبر خلل في اجتياز الدليل. 📌 ملخص الثغرة: النوع : اجتياز الدليل بدون مصادقة المكوّن : برنام...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — Lecture arbitraire de fichiers via streamhandler de ml-logger Ce dépôt fournit un script Python autonome — CVE-2025-10952.py — qui exploite une vulnérabilité de lecture arbitraire de fichiers non authentifiée dans streamhandler de ml-logger, chaînée avec l'endpoint /glob pour...

cgiemail-exploit

Cgiemail - استغلال كشف الكود المصدري/تضمين الملفات المحلي cgiecho هو سكربت مضمّن مع cgiemail، سيعيد أي ملف ضمن جذر مستندات موقع الويب إذا كان الملف يحتوي على أقواس مربعة وكان النص داخل الأقواس قابلاً للتخمين. cgiemail يُشحن حاليًا مع cPanel وهو مفعّل افتراضيًا. مثال للصفحة: Success Processed form...

goBox

goBox GO sandbox to run untrusted code. goBox uses Ptrace to hook into READ syscalls, giving you the option to accept or deny syscalls before they are executed. Usage Usage of ./gobox: gobox FLAGS command flags: -h Print Usage. -n value A glob pattern for automatically blocking file reads. -y val...

CVE-2026-75346

A flaw was found in OpENer. An out-of-bounds read vulnerability in the server-side Common Industrial Protocol CIP SetAttributeList service allows a remote attacker to cause a Denial of Service DoS. By sending specially crafted network requests, an attacker can trigger an invalid memory read,...

CVE-2023-35843

CVE-2023-35843 CVE-2023-35843 NocoDB ثغرة قراءة ملفات عشوائية...

CVE-2024-28752

بيئة إعادة إنتاج Apache CXF CVE-2024-28752 إعلان الثغرة: https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt بدء تشغيل البيئة samples/javafirstjaxwsfactorybean IDEA شغّل خدمة webservice عبر ServerStarter.java البناء استخدم JDK8 mvn clean package java -jar target/cxf.jar الاستغلال...