EUVD-2026-70448

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...

CVE-2026-71220

A stack out-of-bounds write vulnerability in gfs2-utils (specifically the gfs2_edit tool) occurs when the di_height field from on-disk inode metadata is used as an array index without bounds checking, resulting in a stack buffer overflow. Processing a crafted GFS2 filesystem image may lead to arb...

CVE-2026-71220 Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...

CVE-2026-71220

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...

CVE-2021-44228

🛡️ CVE-2021-44228: Log4Shell Analysis - The Vulnerability That Revolutionized Java Security Critical Impact CVSS 10.0 | Discovered in 2021, this flaw in Apache Log4j allows remote code execution RCE and affects millions of systems globally. Even today, it remains a key reminder for cybersecurity! ...

Sandbox-Challenge-Log4Shell-CVE-2021-44228-

सैंडबॉक्स चैलेंज: Log4Shell CVE-2021-44228 अवलोकन यह वॉकथ्रू CISA थ्रेट सैंडबॉक्स चैलेंज के लिए CVE-2021-44228, जिसे आमतौर पर Log4Shell के नाम से जाना जाता है, को पूरा करने के लिए उठाए गए कदमों का दस्तावेजीकरण करता है। चैलेंज में दो उद्देश्यों को पूरा करना शामिल था — एक रेड टीम आक्रामक और एक ब्लू...

react2shelldemo

React2Shell CVE-2025-55182 — عرض أمني محلي لـ RSC ⚠️ تحذير هذا المستودع مخصص للبحث الأمني التعليمي والدفاعي فقط. لا تحاول تشغيل هذا الكود ضد: أنظمة الإنتاج المواقع العامة الخوادم التي لا تملكها أو ليس لديك إذن صريح لاختبارها الاستغلال غير المصرح به للثغرات قد يكون غير قانوني. 📌 نظرة عامة يعرض هذا...

CVE-2020-29607-POC

Pluck CMS 4.7.13 File Upload RCE Exploit 🚨 Educational Remote Code Execution Exploit 🚨 Author: Ron Jost Hacker5preme Reference: Exploit-DB CVE: CVE-2020-29607 ⚠️ Disclaimer: This script is for educational and authorized testing purposes only. Do not use it on systems you do not own or have explici...

Log4Shell-CVE-2021-44228-

تحليل تقرير SOC لـ Log4Shell CVE-2021-44228 نظرة عامة يحتوي هذا المستودع على تحليل شامل لمركز عمليات الأمن SOC لنقاط الضعف Log4Shell CVE-2021-44228 ، وهي واحدة من أكثر الثغرات الأمنية خطورة التي تم اكتشافها في عام 2021. تؤثر الثغرة على مكتبة تسجيل Apache Log4j وتشكل خطرًا شديدًا على المؤسسات في...

CVE-2018-7600-Drupalgeddon2-RCE

CVE-2018-7600 Drupalgeddon2 — مشروع الفريق الأحمر قسم الأمن السيبراني في ITSOLERA | تدريب الأمن الهجومي 2026 نظرة عامة يبحث هذا المشروع في CVE-2018-7600 Drupalgeddon2 — وهي ثغرة حرجة CVSS 9.8 لتنفيذ التعليمات البرمجية عن بُعد دون مصادقة في نظام إدارة المحتوى Drupal، وتؤثر على الإصدارات الأقدم من...

CVE-2026-62897

A flaw was found in .NET Framework. This integer overflow or wraparound vulnerability allows an unauthorized attacker to execute code locally. By exploiting this flaw, an attacker could gain control over the affected system. Mitigation No mitigation is required. Red Hat's .NET packages do not shi...

CVE-2026-33017-Langflop

CVE-2026-33017 Langflow "Langflop" إثبات مفهوم PoC لثغرة RCE دون مصادقة إثبات مفهوم PoC لثغرة تنفيذ التعليمات البرمجية دون مصادقة عبر buildpublictmp في Langflow. يقوم برفع مكوّن خبيث إلى تدفّق عام، ويشغّل البناء، ويلتقط قشرة عكسية. لأغراض اختبار الأمان المصرَّح به فقط. استخدمه فقط ضد الأنظمة التي...

CVE-2023-22527

CVE-2023-22527 - Atlassian Confluence: تنفيذ الأكواد عن بُعد نظرة عامة CVE-2023-22527 هي ثغرة حرجة لتنفيذ الأكواد عن بُعد في Atlassian Confluence Data Center and Server. تسمح هذه الثغرة للمهاجمين غير المصادَق عليهم بتنفيذ أكواد عشوائية على نسخ Confluence المعرّضة للخطر عبر حقن القوالب في نقاط نها...

CVE-2026-70354

A flaw was found in .NET. This vulnerability, caused by an out-of-bounds write, could allow an unauthorized attacker to execute code locally. Exploitation requires local access and user interaction, but if successful, it can lead to significant impact on the system's confidentiality, integrity, a...

EUVD-2026-70404

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

CVE-2026-85169 n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

CVE-2026-85169 n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

CVE-2026-85169

n8n versions before 1.123.73 , 2.35.4 , and 2.36.2 contain an expression sandbox escape in the $fromAI handler. The handler resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-pr...

CVE-2026-85168 n8n before 1.123.73 Remote Code Execution via Git Node

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-driver key families. A repository with...

EUVD-2026-70403

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-driver key families. A repository with...