kli-ex

kli-ex kli-ex est une version étendue de kli. Il ne s'agit que d'une idée de modification. Vous pouvez modifier l'algorithme de chiffrement comme vous le souhaitez. Fonctionnalités Masquer les variables globales Utiliser des graines aléatoires Ajouter un mécanisme de mise en cache Exemple1 auto...

EUVD-2026-89336

simple-git: VISUAL editor environment variable is omitted from unsafe editor detection...

CVE-2024-6678

CVE-2024-6678 - GitLab: Pipeline Schedule Arbitrary User Trigger PoC لـ CVE-2024-6678 وصف الثغرة يتيح GitLab للمستخدمين تشغيل جداول خطوط CI/CD Pipeline Schedules يدويًا عبر زر "Play". تكمن الثغرة في أن وظيفة "play" تسمح لأي مستخدم لديه صلاحيات Developer وليس فقط مالك الجدول بتشغيل الجدول. وينتج ع...

CVE-2023-28432

CVE-2023-28432 Modèles nuclei pour CVE-2023-28432 Description Minio est un framework de stockage d'objets multi-cloud. Dans un déploiement en cluster à partir de RELEASE.2019-12-17T23-16-33Z et avant RELEASE.2023-03-20T20-16-18Z, MinIO renvoie toutes les variables d'environnement, y compris...

Shellshock_CVE-2014-6271

شيلشوك CVE-2014-6271 شيلشوك يرجى تنزيل ملفات docker-compose.yml و poc.py تأكد من تنزيل مكتبة requests عبر pip install requests!!! أما إذا كنت تستخدم uv، فقم بوضع مكتبة requests داخل venv عبر uv!!! وصف CVE الرسمي --- في إصدارات GNU Bash قبل 4.3، كانت هناك مشكلة في معالجة السلاسل التي تلي تعريف...

Malicious code in css-eqxcdx-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93fe0298f7671177e324947b2bf89ec3729b203621f7ca67aa8cd10439306a2 The package presents itself as a polyfill exporting Wix thunderbolt-style registry stubs thunderboltRegistry, siteAssetsRegistry,...

Malicious code in css-vvgsze-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242414f6ea61921e2c62a6f4552456c486eee58d10c0aeec8b33d8043751ee59 thunderboltRegistry.js runs an IIFE on module require that performs two attacker-benefit actions against the installer. First, it execSyncs id, whoam...

Astra Linux – Vulnerability in Apache2

Improper neutralization of vulnerabilities related to escape, meta, or control sequences in the Apache HTTP Server, caused by unexpected overrides of variables calculated by the server for CGI programs, through environment variables set via Apache configuration. This issue affects the Apache HTTP...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: gsmi: fixed a null dereference in gsmigetvariable. We can access EFI variables without retrieving the attributes; therefore, we must allow this behavior in gsmi. The commit 859748255b43 “efi: pstore: Omit efivars caching EFI...

Astra Linux – Vulnerability in Golang-1.23

Arithmetic operations on induction variables within loops were not properly checked for underflow or overflow. As a result, the compiler would allow invalid indexing to occur at runtime, potentially leading to memory corruption...

Astra Linux – Vulnerability in Containerd

In containerd a industry-standard container runtime, before versions 1.3.10 and 1.4.4, containers launched through containerd’s CRI implementation via Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service that share the same image might receive incorrect...

Linux Distros Unpatched Vulnerability : CVE-2019-25777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - YAML versions before 1.27001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob...

Linux Distros Unpatched Vulnerability : CVE-2026-63270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server o...

CVE-2021-4034

CVE-2021-4034 Ceci contient un exploit en un seul fichier pour cve-2021-4034 qui est une escalade de privilèges locale Polkit. Utilisez-le avec sagesse ! Description de la vulnérabilité CVE-2021-4034, communément appelé Pwnkit , est une vulnérabilité de corruption mémoire dans le composant pkexec...

CVE-2014-6271

🚨 CVE-2014-6271 — “شيلشوك” Shellshock ثغرة يوم الصفر عمرها 25 عاماً لتنفيذ الأوامر عن بُعد في GNU Bash عبر متغيرات البيئة 📖 نظرة عامة CVE-2014-6271 ، الملقبة بـ شيلشوك وتعرف أيضاً بـ Bashdoor، هي ثغرة حرجة لتنفيذ الأوامر عن بُعد RCE في قشرة GNU Bash. يمكن للمهاجم إرسال متغيرات بيئة مصممة خصيصاً ع...

CVE-2023-28432

استغلال ثغرة MinIO CVE-2023-28432 الوصف تم تصميم هذا البرنامج النصي بلغة بايثون 3 لاستغلال CVE-2023-28432، والذي قد يؤثر على بعض تكوينات خادم MinIO. يقوم البرنامج النصي بإجراء طلب POST إلى اسم مضيف محدد، محاولاً استرداد متغيرات بيئة حساسة مثل MINIOROOTPASSWORD و MINIOUPDATEMINISIGNPUBKEY. المتطلب...

Environment Variable Exposure in Podman (CVE-2026-57231)

: A security vulnerability exists in Podman versions 1.8.1 through 5.8.3 related to the improper handling of environment variables. Container images defined with an environment variable key but no value can trick Podman into inheriting that variable from the host. Furthermore, the use of an...

gitpython: GitPython: Information disclosure via environment variable expansion in URL handling

A flaw was found in GitPython. This vulnerability allows a remote attacker to exfiltrate sensitive information, such as environment variables, by crafting malicious URLs. When these URLs are processed during Git operations like fetch or pull, the environment variables are expanded and transmitted...

GO-2026-6594 Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod...

CVE-2026-102628

The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled APPDEBUG=true, APPENV=local in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel to expose the entire server environment,...