CVE-2026-23907

ثغرة اجتياز المسار في Apache PDFBox ملخص الثغرة الوصف لا يقوم الكود المثال ExtractEmbeddedFiles في Apache PDFBox بتعقيم أسماء الملفات عند استخراج الملفات المدمجة من ملفات PDF. يمكن للمهاجم تضمين ملفات تحتوي على تسلسلات اجتياز المسار ../ لكتابة ملفات في مواقع عشوائية على نظام الملفات. الكود المعرض...

CVE-2026-1107

Modèle Nuclei CVE-2026-1107 Modèle Nuclei pour détecter CVE-2026-1107 dans EyouCMS. La vulnérabilité permet à des attaquants non authentifiés d'effectuer un Path Traversal / Arbitrary File Read via la fonction checkuserinfo dans Diyajax.php. Détails de la vulnérabilité ID CVE : CVE-2026-1107 Cibl...

CVE-2026-39363

CVE-2026-39363 Vite Dev Server WebSocket Arbitrary File Read Vulnerability Обзор уязвимости Свойство| Информация ---|--- CVE ID| CVE-2026-39363 GHSA ID| GHSA-p9ff-h696-f583 Тип уязвимости| Arbitrary File Read произвольное чтение файлов Затронутый компонент| Vite Dev Server Затронутые версии| Vite...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Rails Active Storage/libvips मनमाना फ़ाइल पठन → SECRETKEYBASE चोरी → RCE अवलोकन CVE-2026-66066 Ruby on Rails Active Storage में एक गंभीर-स्तर CVSS 9.5 प्री-ऑथेंटिकेशन मनमाना फ़ाइल पठन से रिमोट कोड निष्पादन श्रृंखला है, जो Rails 7.2.0–7.2.3.1 , 8.0.0–8.0.5 , और...

CVE-2025-29009

CVE-2025-29009 वर्डप्रेस मेडिकल प्रिस्क्रिप्शन अटैचमेंट प्लगइन फॉर वूकॉमर्स प्लगइन = 1.2.3 एक उच्च प्राथमिकता वाले मनमाने फ़ाइल अपलोड के लिए संवेदनशील है CVE-2025-29009 Webkul Medical Prescription Attachment — असीमित फ़ाइल अपलोड → वेब शेल ,-. . , ,--. ,-. ,-. ,-. ;--' ,-. ,-. ,-. ,-. ,-. / | / | ...

apache-cve-2021-41773-lab

Apache 2.4.49 पाथ ट्रैवर्सल लैब — CVE-2021-41773 क्लोन git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh उपयोग असुरक्षित सर्वर प्रारंभ करें: ./apachelab.sh choose option 1 मैन्युअल एक्सप्लॉइट: curl --path-as-is...

CVE-2014-4688-pfsense

CVE-2014-4688 – pfSense कमांड इंजेक्शन CVE-2014-4688 के लिए संशोधित Exploit-DB प्रूफ-ऑफ-कॉन्सेप्ट pfSense statusrrdgraphimg.php कमांड इंजेक्शन अवलोकन इस रिपॉजिटरी में CVE-2014-4688 के लिए मूल Exploit-DB प्रूफ-ऑफ-कॉन्सेप्ट का एक संशोधित संस्करण है, जो pfSense संस्करण ≤ 2.1.3 को प्रभावित करता है। य...

CVE-2026-107709 Bower decompress-zip has a path traversal vulnerability

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

EUVD-2026-95103

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3 . The issue is located in lib/decompress-zip.js, where the software improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive with entries resolving to prefix-sibling directories can ca...

EUVD-2026-42900

PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow...

kernel: netfilter: flowtable: publish GC-visible tuple last

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...

kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state

A flaw was found in the Linux kernel's netfilter subsystem. When a network namespace is dismantled, the packet logging component frees memory without waiting for ongoing logging operations to complete, resulting in a use-after-free condition. A local attacker could exploit this flaw during networ...

kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()

A flaw was found in the Linux kernel's netfilter Session Initiation Protocol SIP connection tracking module nfconntracksip. A remote attacker could send specially crafted SIP messages that cause an integer overflow during Network Address Translation NAT rewrite delta calculations. This overflow...

kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...

kernel: nvme: add missing SRCU grace period in error path

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

kernel: gfs2: Fix slab-use-after-free in qd_put

A flaw was found in the Linux kernel's GFS2 file system. During filesystem shutdown, quota data objects were freed without being properly removed from the Least Recently Used LRU list. This oversight could lead to a use-after-free vulnerability, where the system attempts to access memory that has...

kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

A flaw was found in the Linux kernel's Bluetooth hciuart component. Lifecycle management issues, including Use-After-Free UAF and race conditions, were identified during the closing and initialization paths. These issues can lead to the dereferencing of freed memory, potentially causing system...

CVE-2026-85706-PoC

CVE-2026-85706: قراءة ملفات محلية عشوائية بدون مصادقة في GitLab CE/EE CVE-2026-85706 هي ثغرة حرجة من نوع اجتياز المسار / غياب المصادقة في واجهات برمجة تطبيقات Repository Commits و Repository Files في GitLab CE/EE: يمكن لمهاجم غير مُصادَق عليه أن يجعل الخادم يقرأ ملفات عشوائية ويحصل على محتواها عب...

EUVD-2026-95101

Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href value with a TAB byte in the URL scheme, causing filterURL to produce an empty protocol that bypasses the...