CVE-2026-104805

The Mitel MiVoice Office 400 system contains a vulnerability in its backup restoration functionality that allows for arbitrary file write . The flaw arises because the system fails to validate paths, file types, integrity, and authenticity of files within a TGZ archive before extraction, notably ...

CVE-2026-104805 Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution

DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the backup restoration mechanism, which fai...

EUVD-2026-92292

DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the backup restoration mechanism, which fai...

MAL-2026-17584 Malicious code in bitcion-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcion-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in bitcion-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcion-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

CVE-2026-100103

Perforce P4 Search container images prior to version 2026.4.2 are vulnerable to an authentication bypass because the service authentication token is reset to a publicly documented default value . An unauthenticated attacker with network access can exploit this to obtain the highest application pr...

CVE-2026-100103 Authentication bypass via default auth token in P4Search

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...

CVE-2026-100103 Authentication bypass via default auth token in P4Search

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...

EUVD-2026-92291

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...

CVE-2026-105314

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...

Watchguard-RCE-POC-CVE-2022-26318

Watchguard-RCE-POC-CVE-2022-26318 Watchguard CVE-2022-26318 के लिए PoC, Python3.12 के साथ काम करने के लिए अपडेट किया गया क्योंकि ssl.wrapsocket अब deprecated है। PoC मूल रूप से https://github.com/h3llk4t3/Watchguard-RCE-POC-CVE-2022-26318/blob/main/POCwg.py से लिया गया है।...

WebminRCE-exploit

WebminRCE-शोषण CVE-2022-0824, CVE-2022-0829 - फ़ाइल प्रबंधक विशेषाधिकार शोषण इस PoC का परीक्षण करने के लिए कमज़ोर एप्लिकेशन एक डॉकर इमेज के रूप में यहां पाया जा सकता है। पूर्वापेक्षाएँ: Python3 Requests module विवरण कमज़ोरी दूरस्थ कोड निष्पादन के लिए अनुचित पहुँच नियंत्रण सुरक्षित उपयोगकर्ता...

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

A critical security flaw impacting Rejetto HTTP File Server HFS is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 CVSS score: 9.3, a case of session forgery stemming from the use of a weak pseudo-random number generator PRNG that c...

kibana-prototype-pollusion

CVE-2019-7609 किबाना संस्करण 5.6.15 और 6.6.1 से पहले के संस्करणों में टिमेलियन विज़ुअलाइज़र में एक मनमाना कोड निष्पादन दोष है। टिमेलियन एप्लिकेशन तक पहुंच वाला एक हमलावर एक अनुरोध भेज सकता है जो जावास्क्रिप्ट कोड को निष्पादित करने का प्रयास करेगा। इससे संभावित रूप से हमलावर होस्ट सिस्टम पर किबाना...

cve-2020-11023-demonstration

Jquery XSS - CVE-2020-11023 هذا عرض توضيحي لإعادة إنتاج CVE-2020-11023. المصدر مأخوذ بشكل أساسي من هذا المنشور. إعادة الإنتاج قم بتثبيت تبعيات npm باستخدام npm install، إذ يتضمن المشروع jQuery 3.4.1 كاعتمادية. شغّل المشروع باستخدام، على سبيل المثال، live server الخاص بـ VS Code. يحتوي الموقع على...

CVE-2021-40444-exp

CVE-2021-40444 PoC CVE-2021-40444 Microsoft Office Word रिमोट कोड निष्पादन का शोषण करने के लिए दुर्भावनापूर्ण docx जनरेटर इस स्क्रिप्ट का निर्माण जंगली में उपयोग किए गए नमूने पर कुछ रिवर्स इंजीनियरिंग पर आधारित है: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx फ़ाइल आपको...

Malicious code in kecack (RubyGems)

RubyGems runs this gem's native extension script ext/kecack/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes and...

CVE-2022-26711

CVE-2022-26711: تجاوز سعة عدد صحيح في Apple ImageIO لـ WebP ثغرة تجاوز سعة عدد صحيح في إطار عمل ImageIO الخاص بشركة Apple عند تحليل صور WebP، مما يؤدي إلى وصول للذاكرة خارج النطاق. الشرح الكامل - تحليل تفصيلي للسبب الجذري مع جولة في التفكيك. نظرة عامة يحدث تجاوز سعة عدد صحيح أثناء حساب بايتات الص...

CVE-2026-4480-POC

CVE-2026-4480 - تنفيذ تعليمات برمجية عن بُعد في نظام الطباعة الفرعي لـ Samba نظرة عامة مواد إثبات المفهوم والبحث المتعلقة بـ CVE-2026-4480 ، وهي ثغرة حرجة لتنفيذ التعليمات البرمجية عن بُعد RCE تؤثر على نظام الطباعة الفرعي في Samba. تنتج الثغرة عن المعالجة غير السليمة لأوصاف مهام الطباعة التي يتحك...

Malicious code in bitcion (RubyGems)

RubyGems runs this gem's native extension script ext/bitcion/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes an...