flowise-arbitrary-file-read-getFileFromStorage

Flowise बिना प्रमाणीकरण के मनमानी फ़ाइल रीड getFileFromStorage — प्रस्तावित नया CVE CVE-2025-71338 से एक अलग भेद्यता जो write sink है। यह एक बिना प्रमाणीकरण के मनमानी फ़ाइल रीड है, Flowise document-store लोडर "rehydrate" पथ में, 1.7.1 – 2.2.3 को प्रभावित करती है, 2.2.4 में ठीक हुई।...

CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX प्लगइन + WPL Real Estate 5.3.0 - बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड से रिमोट कोड एक्ज़ीक्यूशन CVE-2026-13714 — WPL Real Estate बिना प्रमाणीकरण RCE WordPress के लिए Realtyna Organic IDX प्लगइन + WPL Real Estate 5.3.0 हार्डकोडेड I/O API क्रेडेंशियल्स के माध्यम...

IoRingReadWritePrimitive

IoRingReadWritePrimitive पोस्ट-एक्सप्लॉइटेशन तकनीक जो Windows 11 22H2+ पर मनमाने कर्नेल लेखन / वृद्धि को पूर्ण पढ़ने/लिखने की प्रिमिटिव में बदल देती है। यह PoC HackSysExtremeVulnerableDriver का उपयोग कर रहा है। PoC मनमाने लेखन और मनमाने वृद्धि दोनों का समर्थन करता है, जिसे main से फ़ंक्शन में पास...

security-research

सुरक्षा अनुसंधान मेरे व्यक्तिगत सुरक्षा अनुसंधान से संबंधित फ़ाइलों का संग्रह। अतिरिक्त सामग्री मेरे ब्लॉग https://blog.mirch.io पर पोस्ट की जाएगी। उपकरण उपकरण| विवरण ---|--- openssldircheck| OpenSSL लाइब्रेरीज़ में OPENSSLDIR बिल्ड पैरामीटर द्वारा उपयोग किए जाने वाले संभावित असुरक्षित पथों की जा...

marshalsec

Java Unmarshaller Security - आपके डेटा को कोड निष्पादन में बदलना यदि आप Log4Shell/CVE-2021-44228 के लिए यहाँ आए हैं, तो आप शोषण वैक्टर और प्रभावित Java रनटाइम संस्करणों के बारे में पढ़ना चाह सकते हैं: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ पेपर क्रिस फ्रोहॉफ और गेब्रियल...

CVE-2026-106177

A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability...

kernel: svcrdma: Reject inline replies that overflow the pull-up buffer

A flaw was found in the Linux kernel's svcrdma component, which handles network communication using Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted network reply that is larger than expected. This can cause the system to write data beyond the intended memory area,...

kernel: nfsd: initialize copy-notify stateid before publishing it

A flaw was found in the nfsd component of the Linux kernel. A use-after-free vulnerability exists due to improper initialization of the copy-notify state ID before its publication. A remote attacker could exploit this by sending a crafted OFFLOADCANCEL operation, leading to a race condition that...

qu1ckr00t

qu1ckr00t Android कर्नेल arbitrary R/W CVE-2019-2215 की शक्ति प्रदर्शित करने वाला एक PoC एप्लिकेशन। Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t एक PROOF OF CONCEPT है। इसे आपके व्यक्तिगत डिवाइस पर मूल्यवान userdata के साथ उपयोग नहीं किया जाना चाहि...

kernel: svcrdma: Reject inline replies that overflow the pull-up buffer

A flaw was found in the Linux kernel's svcrdma component, which handles network communication using Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted network reply that is larger than expected. This can cause the system to write data beyond the intended memory area,...

kernel: nfsd: initialize copy-notify stateid before publishing it

A flaw was found in the nfsd component of the Linux kernel. A use-after-free vulnerability exists due to improper initialization of the copy-notify state ID before its publication. A remote attacker could exploit this by sending a crafted OFFLOADCANCEL operation, leading to a race condition that...

Security Bulletin: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

Summary Multiple vulnerabilities have been addressed in the Sniffer component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-75875 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal. CWE:CWE-22:...

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

Security Bulletin: Multiple vulnerabilities affect the Windows S-TAP component as part of IBM Guardium Data Protection (CVE-2026-82344, CVE-2026-82334)

Summary Multiple vulnerabilities have been addressed in the Windows S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-82344 DESCRIPTION: IBM Security Guardium is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly...

EUVD-2026-95084

A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability...