54 matches found
CVE-2018-10933
CVE-2018-10933 का POC libssh के सर्वर-साइड स्टेट मशीन में संस्करण 0.7.6 और 0.8.4 से पहले एक कमजोरी पाई गई। एक दुर्भावनापूर्ण क्लाइंट पहले प्रमाणीकरण किए बिना चैनल बना सकता था, जिससे अनधिकृत पहुंच हो सकती थी। उपयोग : root@kitploit: python3 libssh.py -s SERVERADD -u USERNAME -c COMMMANDTOEXEC मूल...
CVE-2018-10933
CVE-2018-10933 تم اكتشاف ثغرة أمنية في آلة الحالة من جانب الخادم في libssh قبل الإصدارين 0.7.6 و0.8.4. يمكن للعميل الخبيث إنشاء قنوات دون إجراء المصادقة أولاً، مما يؤدي إلى وصول غير مصرح به. بعض التفاصيل تنشأ المشكلة من الطريقة التي لا يحافظ بها libssh على حالة المصادقة وكيف يمكن استغلال ذلك لتجا...
cve-2018-10933
CVE-2018-10933 CVE-2018-10933 libssh प्रमाणीकरण बाईपास, एक असुरक्षित Docker कंटेनर जो पोर्ट 2222 पर सुनता है शोषण के लिए। ऑथ बाईपास करने के लिए कंटेनर में एक बुनियादी प्रूफ-ऑफ-कॉन्सेप्ट libssh पैच शामिल है। लॉगिन करने के लिए libssh से डिफ़ॉल्ट "myuser" / "mypassword" का उपयोग करें। Docker कंटेनर...
Double Free
Overview Affected versions of this package are vulnerable to Double Free in QRX handling during channel creation failure. An attacker can trigger heap corruption and terminate the QUIC server process by sending a malformed INITIAL packet that makes portbindchannel fail after QRX allocation and...
CVE-2026-18798
Issue summary: QUIC server may double free QRX QUIC record layer RX object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidence...
CVE-2026-74608
A flaw was found in the Server Message Block SMB client of the Linux kernel. A use-after-free vulnerability exists in the cifstryaddingchannels function. This occurs when a concurrent interface list refresh removes a reference to an interface while a channel creation is in progress and fails,...
CVE-2026-74608
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifstryaddingchannels cifstryaddingchannels takes a temporary reference to an interface before dropping ifacelock. If cifssesaddchannel fails, it drops that reference and then increments...
AZL-97124 CVE-2026-74608 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifstryaddingchannels cifstryaddingchannels takes a temporary reference to an interface before dropping ifacelock. If cifssesaddchannel fails, it drops that reference and then increments...
CVE-2026-74608
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifstryaddingchannels cifstryaddingchannels takes a temporary reference to an interface before dropping ifacelock. If cifssesaddchannel fails, it drops that reference and then increments...
Server-side Request Forgery (SSRF)
Overview phanan/koel is a personal audio streaming service. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the createPodcastChannel.view process. An attacker can cause the server to initiate HTTP requests to internal or private network resources by...
Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation
Summary Koel v9.6.0 protects the regular podcast subscription API with SafeUrl, but the Subsonic-compatible createPodcastChannel.view route does not apply the same protection. An authenticated user can supply a private URL and cause Koel to fetch it server-side during podcast parsing. This was...
EUVD-2026-40430
Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.createchannel permission can exploit a logic mismatch between existence validation and...
CVE-2026-56249
Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.createchannel permission can exploit a logic mismatch between existence validation and...
CVE-2026-56249 Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name Collision
Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.createchannel permission can exploit a logic mismatch between existence validation and...
CVE-2026-56249
Capgo before 12.128.2 has an authorization bypass in the channel creation endpoint that lets authenticated users overwrite existing channels by reusing names. Attackers with app.create_channel permission can exploit a logic mismatch between existence validation and upsert operations to reassign c...
CVE-2026-56249 Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name Collision
Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.createchannel permission can exploit a logic mismatch between existence validation and...
BIT-DISCOURSE-2026-27152 DIscourse has DM communication-preference bypass when adding members
Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, DM communication-preference bypass when adding members via Chat::AddUsersToChannel — a user could add targets who have blocked/ignored/muted them to an existing DM channel, bypassing per-recipien...
CVE-2024-39837
Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6 fail to properly restrict channel creation which allows a malicious remote to create arbitrary channels, when shared channels were enabled...