SmmBackdoor

الباب الخلفي SMM للمنصات المبنية على UEFI !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! هذا مشروع قديم ومهجور، للنسخة الحالية من الباب الخلفي راجع صفحة مشروع SMM Backdoor Next Gen ووثائقه: https://github.com/Cr4sh/SmmBackdoorNg...

root-my-webos-tv

الحصول على صلاحيات الجذر لتلفاز webOS الخاص بي نص بايثون بسيط يقوم بتشغيل خادم telnet على أجهزة webOS الضعيفة كـ root. أجهزة تلفاز تم التحقق منها webOS 4.9.7 - 5.30.40 الطراز LG43UM7000PLA webOS 5.5.0 - 04.50.51 الطراز OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 الطراز OLED48C1PUB...

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — تحليل ثغرة ScadaBR تحليل فني للثغرة وإحاطة عن CVE-2026-9645 ، التي تؤثر على منصة ScadaBR SCADA/HMI مفتوحة المصدر. نظرة عامة CVE-2026-9645 هي ثغرة حرجة لتنفيذ التعليمات البرمجية عن بُعد بعد المصادقة في ScadaBR. وفقًا للإحاطة المُعدّة: الخطورة: حرجة CVSS v3.1: 9.9 نوع الثغرة: تنفيذ...

CVE-2026-84250

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges...

cve-2026-31431

CVE-2026-31431 Copy Fail اختبار يحتوي هذا المستودع على ملف سير عمل لـ GitHub Actions لاختبار ما إذا كان مشغّل الإجراءات action runner متأثرًا بـ CVE-2026-31431. يمكنك إجراء الاختبار بنفسك، فقط أنشئ مستودعًا باستخدام هذا القالب وقم بتشغيل سير العمل test.yml يدويًا تذكر تغيير حقل on إلى هدف الاختبا...

GNU-Inetutils-telnet-CVE-2026-24061-

CVE-2026-24061 أداة اكتشاف تجاوز المصادقة في GNU Inetutils Telnetd 📋 نظرة عامة على المشروع هذه أداة اكتشاف متقدمة لتجاوز المصادقة في GNU Inetutils Telnetd CVE-2026-24061. تبلغ درجة CVSS لهذه الثغرة 9.8، ويمكن للمهاجم من خلالها الحصول على صلاحيات root دون مصادقة عبر حقن متغيرات البيئة. 🚨 معلومات...

CVE-2025-20393

CVE-2025-20393 📌 نظرة عامة CVE-2025-20393 هي ثغرة تنفيذ أوامر عن بُعد RCE خطيرة تؤثر على أجهزة Cisco Secure Email Gateway SEG وCisco Secure Email and Web Manager SEWM التي تعمل بنظام Cisco AsyncOS. توجد الثغرة بسبب تحقق غير صحيح من المدخلات في ميزة Spam Quarantine. يمكن لأي مهاجم عن بُعد غير موثَ...

CLEANSTART-2026-IG95485 On Linux, if the target of Root

CVE-2026-32282 affects multiple packages. On Linux, if the target of Root. See references for individual vulnerability details...

CVE-2026-76488 Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...

CVE-2026-76488

A vulnerability exists in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) due to insufficient access control to file system resources. An authenticated, remote attacker with valid administrative credentials can exploit this by submitting crafted valu...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — حقن SQL غير مصادق عليه حتى RCE بصلاحيات الجذر الخطورة: حرجة النوع: حقن SQL غير مصادق عليه ← تنفيذ تعليمات برمجية عن بُعد البرنامج المتأثر: FreePBX وحدة endpoint تم الاختبار على: FreePBX على CentOS 7، Apache 2.4، PHP 7.4، MariaDB 5.5 نظرة عامة توجد ثغرة حقن SQL غير مصادق...

Rocky Linux 10.2 [CIQ] Security Update: go-fdo-client / go-fdo-client-debuginfo / go-fdo-client-debugsource / etc Multiple Vulnerabilities (crlsa-2026_22141)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202622141 advisory. crypto/tls: Unexpected session resumption in crypto/tls CVE-2025-68121 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certifica...

Rocky Linux 8 [CIQ] Security Update: open-vm-tools / open-vm-tools-debuginfo / open-vm-tools-debugsource / etc (crlsa-2022_6357)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226357 advisory. open-vm-tools: local root privilege escalation in the virtual machine CVE-2022-31676 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: libiscsi / libiscsi-debuginfo / libiscsi-debugsource / etc Multiple Vulnerabilities (crlsa-2019_3345)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20193345 advisory. ntfs-3g: heap-based buffer overflow leads to local root privilege escalation CVE-2019-9755 QEMU: slirp: information leakage in tcpemu due to uninitialized...

CVE-2026-91841 Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection

OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp. id: CVE-2023-25280 info: name: D-Link DIR820LA1FW105B03 'pingaddr' - OS Command Injection author: pussycat0x severity:...

Security Bulletin: This Power System update is being released to address CVE-2026-52943, CVE-2026-43373, and CVE-2026-43194

Summary An unauthenticated attacker on the BMC's local network can cause loss of service. Vulnerability Details CVEID:CVE-2026-52943 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers...

CVE-2026-96808

A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...

DEBIAN-CVE-2026-96808

In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...

CVE-2026-96808

In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...