RHEL 10 : vim (RHSA-2026:75769)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:75769 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary command execution via crafted tags file in...

Cisco ASA OS Command Injection (CVE-2021-1476)

A vulnerability in the CLI of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to...

RHEL 10 : freerdp (RHSA-2026:75570)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:75570 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Cisco ASA Command Injection (CVE-2021-1488)

A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...

AlmaLinux 9.2 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791199760)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791199760 advisory. - Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and...

ALSA-2026:75769 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

PT-2026-106212

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description The SVG exporter improperly handles the fill-color value of a text object, inserting it into a ppmcolormask command string that is then executed via child process.exec. An attacker with file editing...

ALSA-2026:75570 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialize...

Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

CVE-2026-105183: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

...[ More ]

Apache Submarine retired to the Apache Attic suffers from an authentication bypass leading to unauthenticated remote code execution. The security filter CommonFilter.isProtectedApi treats any request whose User-Agent header matches the Python SDK pattern as not requiring authentication, and the...

...[ More ]

There is a critical authentication bypass vulnerability residing within Kestra OSS's core request-filtering mechanism. Due to insecure suffix-matching logic instead of strict routing or exact segment validation, attackers can craft custom request paths that bypass security controls. This allows...

CVE-2026-16723

CVE-2026-16723 दान करें PayPal के माध्यम से या नीचे दिए गए QR कोड को स्कैन करके इस प्रोजेक्ट के रखरखाव में सहायता करें। ⚡ सरल उपयोग इस प्रोजेक्ट का उपयोग केवल सुरक्षित और अधिकृत वातावरण में करें, जैसे: स्थानीय वर्चुअल मशीनें Docker कंटेनर पृथक प्रयोगशाला सेटअप अधिकृत पेनेट्रेशन टेस्टिंग वातावरण...

veneficus

@abraxasnull · [email protected] · abraxaslabs.tech · github.com/abraxas/veneficus Credit: @YoSoth0 Veneficus Mini v3.0 مجموعة أدوات زرع implant لنظام Windows 10/11 x64: PowerShell stager ، وRust PE ، وCloudflare Worker يقوم بإشعار المشغّل عبر Telegram. الـ stager resources/loader.ps1 مُصمَّ...

CVE-2026-33454

camel-mail हैडर इंजेक्शन → RCE भेद्यता पुनरुत्पादक CVE-2026-33454 यह प्रोजेक्ट Apache Camel के camel-mail घटक में Camel संदेश हैडर इंजेक्शन भेद्यता को प्रदर्शित करता है, जिसे CVE-2026-33454 के रूप में ट्रैक किया गया है। एक हमलावर जो Camel मेल उपभोक्ता द्वारा निगरानी किए गए मेलबॉक्स में ईमेल डिलीव...

CVE-2019-19203

CVE-2019-19203 Oniguruma 6.x में 6.9.4rc2 से पहले एक समस्या पाई गई। gb18030.c फ़ाइल में gb18030mbcenclen फ़ंक्शन में, एक UChar पॉइंटर को बिना यह जांचे कि वह मिलान किए गए स्ट्रिंग के अंत से आगे निकल गया है या नहीं, dereference किया जाता है। इससे हीप-आधारित बफर ओवर-रीड होता है। शोधकर्ता: मैनएनडी ऑफ...

xzwhy

xzwhy / / / / \ / /\ यह प्रोजेक्ट XZ Utils को प्रभावित करने वाले CVE-2024-3094 के लिए एक Kubernetes-अनुकूल प्रूफ ऑफ कॉन्सेप्ट POC है। एक्सप्लॉइट के उद्गम और तंत्र के उत्कृष्ट वॉकथ्रू के लिए यह लेख देखें। चेतावनी ⚠⚠⚠ नीचे दिए गए किसी भी कमांड को चलाने से एक असुरक्षित एप्लिकेशन तैनात हो सकता है जो...

mav-raiders

MAV Raiders Security Analysis and Exploitation of MAVLink-B...

SwordStamp

SwordStamp SwordStamp adds order-robust detection and semantic-span units to embedding-based semantic watermarks. This artifact contains the exact paper configuration, generation and detection code, the unchanged attack suite, quality evaluation, and deterministic result extraction and plotting...

CVE-2020-5903

CVE-2020-5902 RCE /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=delete+cli+alias+private+list /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=create+cli+alias+private+list+command+bash...