369565 matches found
CVE-2026-105326 Cups: cups: argument injection in mailto notifier via notify-recipient-uri
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326 Cups: cups: argument injection in mailto notifier via notify-recipient-uri
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326 Cups: cups: argument injection in mailto notifier via notify-recipient-uri
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326
The CUPS service is vulnerable to an argument injection flaw within the mailto notifier. When email notifications are enabled, the CUPS scheduler processes printer subscription requests containing a notify-recipient-uri . Because the mailto notifier fails to sanitize the recipient address before ...
EUVD-2026-92637
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-75855
العنوان ثغرة اجتياز المسار في أوامر الخادم "create database" / "drop database" تسمح بكتابة وحذف ملفات تعسفية خارج دليل قاعدة البيانات المُهيأ الملخص تستخدم أوامر create database و drop database في نقطة النهاية POST /api/v1/server اسم قاعدة البيانات المقدم من المُتصل لبناء مسار نظام ملفات دون أي...
CVE-2026-33937
CVE-2026-33937 — حقن AST في Handlebars.js وتنفيذ التعليمات البرمجية عن بُعد RCE الإصدارات من 4.0.0 حتى 4.7.8 من Handlebars.js متأثرة. درجة CVSS: 9.8 حرجة. نظرة عامة CVE-2026-33937 هو ثغرة من نوع الارتباك النمطي type confusion في Handlebars.js. تقبل دالة Handlebars.compile كلاً من سلسلة القالب وكا...
mcpjam-cve-2026-23744-validator
مدقق الأمان المصرح به لـ MCPJam Inspector مدقق إثبات مفهوم محدود لـ CVE-2026-23744 الذي يؤثر على نشرات MCPJam Inspector الضعيفة. هذا المشروع هو أداة تحقق مستقلة وغير تخريبية لـ CVE-2026-23744 الذي تم الكشف عنه سابقًا. إنه ليس الإفصاح الأصلي عن الثغرة أو الاستغلال. هذا المستودع مخصص لمتخصصي الأمن...
CVE-2019-15107
CVE-2019-15107 Webmin 1.890 अनधिकृत रिमोट कोड निष्पादन यह स्क्रिप्ट Webmin 1.890 में बिना प्रमाणीकरण के कमांड निष्पादन भेद्यता का शोषण करने के लिए डिज़ाइन की गई है। यह आपको लक्षित Webmin सर्वर पर मनमाने कमांड निष्पादित करने या रिवर्स शेल प्राप्त करने की अनुमति देती है। उपयोग यह एक्सप्लॉइट 5 तर्क...
CVE-2020-0796-BOF
هذا هو تجربة رافاييل مع ثغرة SMBGhost LPE. لقد بدأت مع الكود المصدري من إطار Metasploit: cve-2020-0796: SMBv3 Compression Buffer Overflow SMBGhost CVE 2020-0796 https://github.com/rapid7/metasploit-framework/tree/master/external/source/exploits/CVE-2020-0796 BSD Licensed وإليك ما فعلته: 1. قمت...
CVE-2023-20198
CVE-2023-20198 إثبات المفهوم PoC لـ CVE-2023-20198 الوصف تتميز CVE-2023-20198 بتحقق غير صحيح من المسار لتجاوز فلترة Nginx للوصول إلى نقطة النهاية الويب webuiwsmahttp دون الحاجة إلى المصادقة. من خلال تجاوز المصادقة على نقطة النهاية، يمكن للمهاجم تنفيذ أوامر Cisco IOS عشوائية أو إجراء تغييرات في...
wp2shell-lab
wp2shell lab & detector + pre-auth RCE PoC A self-contained lab, non-destructive detector , and full pre-auth RCE proof-of-concept for wp2shell — the pre-authentication vulnerability chain in WordPress core: CVE| Component| Class| CVSS ---|---|---|--- CVE-2026-60137| WPQuery::authornotin| SQL...
CVE-2026-52806
Gogs RCE — git rebase में आर्गुमेंट इंजेक्शन CWE-88 पुल रिक्वेस्ट मर्ज फ्लो में आर्गुमेंट इंजेक्शन के माध्यम से Gogs नामक एक ब्रांच को Git द्वारा --exec फ़्लैग के रूप में पार्स किया जाता है, न कि पोज़ीशनल आर्गुमेंट के रूप में, जिससे रीबेस के दौरान प्रत्येक रीप्ले किए गए कमिट के बाद sh -c चलता है।...
CVE-2025-14847
MongoDB CVE-2025-14847 भेद्यता पता लगाने का उपकरण MongoDB मेमोरी लीक भेद्यता CVE-2025-14847 पता लगाने का उपकरण ⚠️ महत्वपूर्ण सूचना: यह उपकरण केवल अधिकृत सुरक्षा परीक्षण और भेद्यता मूल्यांकन के लिए है। अनधिकृत उपयोग कानून का उल्लंघन हो सकता है। 📋 सूची भेद्यता विवरण विशेषताएँ स्थापना उपयोग विधि...
cve-2019-3396
cve-2019-3396 Unauthenticated Confluence RCE cve-2019-3396 एक्सप्लॉइट लाइब्रेरीज सेटअप करें bundle install चलाएं ┌──user㉿hostname-/path/to/cve-2019-3396 └─$ ruby cve-2019-3396.rb exploit - CVE-2019-3396 Author - Abdallah Mohamed Elsharif Greetz to Ghost5egy and Hamza Abdulrahman and Omar and Alaa...
masq
Sit where the model sits. See what it can see. MASQ MASQ is a local security CLI for AI agent stacks. It sits in the same seat the model sits in: it reads MCP tool catalogs, completes the MCP handshake, looks through session logs, and probes local model HTTP ports. Then it prints findings and...