EUVD-2023-60708

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

CVE-2023-5649

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

EUVD-2026-94735

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to a persistent Denial of Service (DoS) . The flaw exists because the system directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configu...

CVE-2026-87685

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...

CVE-2026-107183

A flaw was found in llama.cpp. An unauthenticated remote attacker could exploit this vulnerability by submitting a specially crafted completion request with malformed chat parser parameters. Due to improper memory handling, this request triggers a use-after-free condition that corrupts memory. Th...

CVE-2026-87663

An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing remote command execution IPC frames across the fabric, the receiving switch processes these...

CVE-2026-87663

An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing remote command execution IPC frames across the fabric, the receiving switch processes these...

CVE-2026-87663

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to an authentication bypass and command injection vulnerability within the inter-switch remote execution service. The root cause is the processing of remote command execution IPC frames at an elevated level withou...

MARMALADE-2-CVE-2025-67780-Exploit

استغلال MARMALADE 2/CVE-2025-67780 PoC أكواد PoC لاستغلال ثغرة MARMALDE 2 CVE-2025-67780 في أطباق Starlink اقرأ مدونتي الكاملة حول كيفية اكتشاف هذه الثغرة وكيف يمكنك جعلها تفعل ما تريد: https://www.akawlabs.com/blog/starlink-grpc-execution طوّرت عدة تطبيقات لإثبات المفهوم توضح أنه يمكن إجبار أطبا...

d8-copy-fail-mitigation

تخفيف CVE-2026-31431 لمنصة Deckhouse Kubernetes اللغة: English | Русский حول الثغرة الأمنية CVE-2026-31431 هي ثغرة أمنية في وحدة algifaead الخاصة بنواة لينكس، والتي تعرض واجهة برمجة تطبيقات التشفير الخاصة بالنواة لمساحة المستخدم من خلال عائلة مآخذ AFALG. وجود خلل في واجهة AEAD التشفير الموثّق مع...

CVE-2020-1938

أعلان: يجب أن يتوافق استخدام جميع أدوات الأمن السيبراني مع القوانين واللوائح الوطنية، والمعايير الصناعية، واللوائح ذات الصلة للنظام المستهدف، ولا يمكن استخدامها لأي غرض غير قانوني أو ينتهك الحقوق المشروعة للآخرين.‌ يجب أن يدرك المستخدمون أنه لا يمكن لأي أداة ضمان الأمان المطلق، وقد يؤدي الاستخدام...

CVE-2026-42154

CVE-2026-42154 CVE-2026-42154 — ثغرة رفض الخدمة DoS عبر Snappy في القراءة عن بعد من Prometheus...

CVE-2026-87685

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...

CVE-2026-87678

An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication FA, the system fails to sanitize the Identity Provider IdP issuer parameter. An authenticated administrator—or an...

CVE-2026-87671

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remot...

CVE-2026-87676

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

CVE-2026-87668

A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary...