36553 matches found
CVE-2026-67273: Improper Neutralization of Special Elements Used in a Template Engine
Dell Container Storage Modules, versions prior to 1.18.0, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
Cisco ASA Improper Input Validation (CVE-2022-20745)
A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to...
Cisco ASA Authentication Bypass Using an Alternate Path or Channel (CVE-2023-20247)
A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect using only a valid...
Cisco ASA Missing Release of Resource after Effective Lifetime (CVE-2024-20493)
A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to deny further VPN user authentications for several...
The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Cisco ASA URL Redirection to Untrusted Site (CVE-2023-20264)
A vulnerability in the implementation of Security Assertion Markup Language SAML 2.0 single sign-on SSO for remote access VPN in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to intercept the SAML...
Cisco ASA Missing Release of Resource after Effective Lifetime (CVE-2024-20481)
A vulnerability in the Remote Access VPN RAVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of the RAVPN service. This vulnerability is due to resource...
Cisco ASA Use of Insufficiently Random Values (CVE-2024-20331)
A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to prevent users from authenticating. This vulnerabili...
Cisco ASA Missing Authorization (CVE-2024-20355)
A vulnerability in the implementation of SAML 2.0 single sign-on SSO for remote access VPN services in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to successfully establish a VPN session on an affecte...
PT-2026-106936
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in the SignIn function allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and using a crafted...
CVE-2021-3130
CVE-2021-3130 الوصف المقترح في تطبيق Open-AudIT حتى الإصدار 4.0.2، تخفي واجهة الويب أسرار SSH وكلمات مرور Windows ومتغيرات SNMP عن المستخدمين باستخدام إخفاء 'حقل كلمة المرور' في HTML. باستخدام أدوات المطور أو ما شابه، يمكن تغيير الإخفاء بحيث تصبح بيانات الاعتماد مرئية. نوع الثغرة الأمنية بيانات...
CVE-2025-22968
CVE-2025-22968 D-Link DWR-M972V Software Version 1.05SSG Unauthenticated Access Vulnerability الوصف يسمح الوصول غير المُصادق عليه في التهيئة الافتراضية لجهاز D-Link DWR-M972V الإصدار 1.05SSG من البرنامج لمهاجم مجهول بالوصول إلى جهاز التوجيه وتحميل نصوص برمجية خبيثة للباب الخلفي عبر الوصول العام...
Follina
Follina مُصحَّح شل الوصول عن بُعد لنظام ويندوز مبني على cve-2022-30190 ⚠️ صُنع للأغراض التعليمية فقط 📚 التثبيت والاستخدام 🛠️ $ git clone https://github.com/AbdulRKB/Follina.git $ cd Follina $ pip install -r requirements.txt $ python main.py...
CVE-2024-45519
CVE-2024-45519 Script d'exploitation de vulnérabilité SMTP Aperçu Ce script vérifie la présence de vulnérabilités sur un serveur SMTP et, le cas échéant, exploite la vulnérabilité en établissant une connexion reverse shell vers votre machine. Fonctionnalités Vérification du port : Vérifie si le...
Astra Linux – Vulnerability in openjdk-11
Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Libraries. The supported versions affected include Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily exploitable...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in Content Settings in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in openjdk-11
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Security. The supported versions affected by this vulnerability are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out-of-bounds memory access via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in openjdk-11
Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JNDI. The supported versions affected include Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3, and 22.2.0. This vulnerabili...
CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit
CVE-2026-50751 - استغلال تجاوز المصادقة لـ Check Point IKEv1 ⚠️ تحذير مهم هذا الكود مخصص للأغراض التعليمية واختبارات الأمان المصرح بها فقط. الاستخدام غير المصرح به ضد أنظمة دون إذن صريح هو غير قانوني. المؤلف غير مسؤول عن إساءة استخدام هذه الأداة. 📋 وصف CVE-2026-50751 هي ثغرة خطيرة لتجاوز المصادقة...