vulnhuntr

أداة لتحديد الثغرات القابلة للاستغلال عن بُعد باستخدام نماذج اللغة الكبيرة LLMs وتحليل الشيفرة الثابتة. أول ثغرات اليوم الصفري 0day التي اكتشفها الذكاء الاصطناعي بشكل مستقل في العالم الوصف يستفيد Vulnhuntr من قدرات نماذج اللغة الكبيرة LLMs لإنشاء وتحليل سلاسل استدعاء كاملة للشيفرة تلقائيًا، بدءًا...

CVE-2014-6271

CVE-2014-6271 bash को ठीक करने का एक स्वचालित तरीका कमजोरी के लिए परीक्षण आप निम्नलिखित परीक्षण चलाकर निर्धारित कर सकते हैं कि आप कमजोर हैं या नहीं: env x=' :;; echo vulnerable' bash -c 'echo hello' कमजोरी को ठीक करना इसे कमांड लाइन पर चलाएं। आपसे अपना पासवर्ड दर्ज करने के लिए कहा जा सकता है। bas...

Dzzoffice 2.02.1 - Cross-Site Scripting

Dzzoffice 2.02.1SCUTF8 contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via the zero parameter. id: CVE-2021-30203 info: name: Dzzoffice 2.02.1 - Cross-Site Scripting author: arafatansari severity: high description: | Dzzoffice...

cve-2020-7247-exploit

cve-2020-7247-exploit cve-2020-7247 का Python शोषण भेद्यता के बारे में पढ़ें: https://blog.firosolutions.com/exploits/opensmtpd-remote-vulnerability/...

Grandstream UCM6200 - SQL Injection

Grandstream UCM6200 series contains an unauthenticated remote SQL injection caused by crafted HTTP requests, letting attackers execute shell commands as root on versions before 1.0.19.20 or inject HTML in emails before 1.0.20.17. id: CVE-2020-5722 info: name: Grandstream UCM6200 - SQL Injection...

SAP Solution Manager 7.2 - Remote Command Execution

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

Astra Linux – Vulnerability in dcmtk

A vulnerability was detected in OFFIS DCMTK up to version 3.6.9. The issue affects the function DcmByteString::makeDicomByteString in the file dcmdata/libsrc/dcbytstr.cc of the dcmdata component. This manipulation can lead to memory corruption. The attack can be launched remotely. Upgrading to...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JAXP. The supported versions affected include Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1, and 22.0.0.2. This easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2025-30156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication...

Linux Distros Unpatched Vulnerability : CVE-2026-53793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by...

CVE-2026-64899 Microsoft Office Information Disclosure Vulnerability

...

CVE-2026-62714

CVE-2026-62714 describes an integer underflow (wrap/wraparound) in Windows DHCP Server that allows an unauthorized attacker on an adjacent network to disclose information. The NVD entry confirms an ADJACENT network attack vector with LOW complexity, NONE privileges, and NONE user interaction, and...

CVE-2026-62716 Windows DHCP Server Information Disclosure Vulnerability

...

Linux Distros Unpatched Vulnerability : CVE-2026-73147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-pc2g-2p95-4cr5: TCL command injection in reflector client CVE-2026-73147 Note that Nessus relies on the presen...

ROS-20260810-73-0003

The vulnerability of the JAXP component in the Oracle Java SE software platform and the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to...

Photon OS 5.0: Gstreamer PHSA-2025-5.0-91-0461

An update of the gstreamer package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0461. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EUVD-2026-54922

A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an unknown function of the file controllers/messages/message.go of the component IN Clause Handler. Performing a manipulation of the argument ids results in sql injection. The attac...

CVE-2026-19341

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has...

CVE-2026-19244 HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connectmcpservers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be...