CVE-2025-14440

CVE-2025-14440 JAY Login & Register = 2.4.01 - Обход аутентификации через cookie 🚨 JAY Login & Register = 2.4.01 - Обход аутентификации через cookie 📝 Описание Плагин JAY Login & Register для WordPress уязвим для обхода аутентификации в версиях до 2.4.01 включительно. Эта ошибка возникает из-за...

x18-leak

x18-leak iOS 11.2 introduced a kernel information leak that could be used to determine the kASLR slide. The issue was the result of a newly added feature, ARMKERNELPROTECT, that inadvertently caused the address of the kernel function Lel0synchronousvector64long to appear in register x18 when...

SCADAShutdownTool

SCADA Shutdown Tool SCADA Security Testing tool SCADAShutdownTool is an industrial control system automation and testing tool allows security researchers and experts to test SCADA security systems, enumerate slave controllers, read controller's registers values and rewrite registers data...

AZL-99744 CVE-2026-0799 affecting package libpcap 1.10.6-1

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

CVE-2026-0799

libpcap versions before 1.10.7 contain an out-of-bounds read and write (OOBR/OOBW) in its BPF interpreter. In BPF instructions that load/store a value from/to a scratch memory register, the register index is an unsigned 32-bit integer that must not exceed 15, but the interpreter does not validate...

EUVD-2026-72015

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

CVE-2018-7600

CVE-2018-7600 Drupalgeddon2 Exploit – Python3 DISCLAIMER: This project is for educational and authorized penetration testing purposes only. Do NOT use this code on systems you do not own or have explicit written permission to test. Unauthorized use is illegal and punishable by law. The author...

CVE-2025-5548

CVE-2025-5548 भेद्यता का तकनीकी अध्ययन परिचय इस कार्य में CVE-2025-5548 भेद्यता का विश्लेषण किया गया है, जो FreeFloat FTP Server v1.0 में मौजूद स्टैक बफर ओवरफ्लो से संबंधित है। प्रयोगशाला का मुख्य उद्देश्य यह समझना है कि एक भेद्य अनुप्रयोग हेरफेर किए गए इनपुट पर कैसे प्रतिक्रिया करता है, और एक...

PT-2026-86440

Name of the Vulnerable Software and Affected Versions libpcap versions prior to 1.10.7 Description The BPF interpreter fails to validate the register index when loading or storing values from or to a scratch memory register. While the index is an unsigned 32-bit integer that should not exceed 15,...

AZL-99437 CVE-2026-80883 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1xclientregister function is called just prior to register map initialization loop, making the device available to userspace. This m...

CVE-2026-80883

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1xclientregister function is called just prior to register map initialization loop, making the device available to userspace. This m...

CVE-2026-80883 drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1xclientregister function is called just prior to register map initialization loop, making the device available to userspace. This m...

EUVD-2026-71513

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1xclientregister function is called just prior to register map initialization loop, making the device available to userspace. This m...

CVE-2026-85668 Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register

Xinference affected commit 4a94832, v3.x contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint, which accepts a caller-supplied modelpath parameter without authentication or path confinement. The endpoint reads and parses config.json,...

EUVD-2026-71124

Xinference affected commit 4a94832, v3.x contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint, which accepts a caller-supplied modelpath parameter without authentication or path confinement. The endpoint reads and parses config.json,...

CVE-2026-64640

CVE-2026-64640 — Apache Polaris: выдача учетных данных до проверки местоположения в register Самодостаточный воспроизводитель одной командой для CVE-2026-64640 : конечные точки register в Iceberg REST в Apache Polaris выпускают учетные данные облачного хранилища для пути, указанного вызывающей...

CVE-2024-54363

CVE-2024-54363 Wp NssUser Register successful, just Check this: Login...

CVE-2026-44506

Medplum is a developer platform that enables development of healthcare apps. In Medplum versions 4.1.10 through 5.1.6, the /oauth2/register endpoint could return the clientsecret of preconfigured OAuth clients defined via the defaultOAuthClients server configuration when a matching redirecturi wa...

outlook-auto-register

Outlook Auto Register تسجيل جماعي لـ Microsoft Outlook عبر البروتوكول الخالص · حل PerimeterX · لوحة تحكم ويب · تجمّع بروكسي / تجمّع حسابات / فحص النشاط في أداة واحدة ماذا يحل · نظرة سريعة · بدء سريع · استراتيجية مكافحة الحظر · English · Tiếng Việt...

Web-Penetration-Test

Web-Penetration-Test WordPress कमजोरियों CVE-2025-34077 का शोषण, कुकी इंजेक्शन के माध्यम से प्रमाणीकरण बायपास, और रूट तक विशेषाधिकार वृद्धि। मेरी साइबर सुरक्षा विशेषज्ञता का हिस्सा। दिन 1: अपनी पहली वेबसाइट हैक करना प्रयोगशाला रिपोर्ट: "BigWear" सर्वर का शोषण अपनी साइबर सुरक्षा यात्रा के इस पहले...