CVE-2022-40684

CVE-2022-40684 CVE-2022-40684 - تجاوز المصادقة لاستخراج مستخدمي الإدارة وإعدادات LDAP - يقوم هذا الـ PoC بإجراءات للقراءة فقط. تشغيل الاستغلال USE: python3 exploit.py https://target.com Ex: python3 exploit.py https://target.com تشغيل قالب nuclei echo https://target.com | nuclei -t...

PT-2026-107991

EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor on routes not requiring authentication. Attackers knowing a 2FA-enabled user's username and password can skip the second factor to read config parameters not exposed publicly...

PT-2026-108160

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated high-privileged user can execute arbitrary commands with root privileges due to a command injection flaw in the SUID-root ssh config wrapper component. This occurs when...

EulerOS 2.0 SP15 : containerd (EulerOS-SA-2026-3902)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

CVE-2026-107176

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

CVE-2026-107176

A vulnerability exists in the cluster-samples-operator where the RBAC Role coreos-pull-secret-reader in the openshift-config namespace grants excessive permissions. The role provides get, list, and watch access to all Secret resources because it lacks resourceNames scoping, even though the operat...

CVE-2026-107176 Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

EUVD-2026-94581

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

CVE-2026-107176 Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

CVE-2026-107176

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

agentic-ioc-scanner

agentic-ioc-scanner ماسح IOC لأدوات الترميز الذكية AI coding tools — يكتشف Mini Shai-Hulud و Gemini CLI RCE و Cursor CVE-2026-26268 و DPRK PromptMink. مجموعة كشف لاختراق المساعدين البرمجيين الذكيين Claude Code، Gemini CLI، Cursor والتبعيات التي يسحبونها إلى مستودعاتك. إحدى عشرة فحصًا تشمل حقن...

CVE-2026-107206

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

CVE-2026-107206

LMCache versions through 0.5.5 are vulnerable to a missing authentication flaw in the multiprocess mode HTTP server. Because management endpoints listen on all interfaces by default, remote unauthenticated attackers can access sensitive functionality. Impacted actions include reading environment ...

CVE-2026-107206 LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

CVE-2026-107206 LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

CVE-2026-6951

CVE-2026-6951 simple-git Remote Code Execution ★ CVE-2026-6951 simple-git --config Option Filter Bypass RCE PoC ★ https://github.com/user-attachments/assets/4c992530-c5bb-4ff4-be5d-af0857eebb67 Aperçu CVE-2026-6951 est une vulnérabilité d'exécution de code à distance dans simple-git causée par un...

CVE-2013-3900-Remediation-Script

CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key function...

CVE-2017-7921

استغلال CVE-2017-7921 يسمح هذا السكريبت بالتفاعل مع كاميرا معرضة للثغرة CVE-2017-7921 لأداء العمليات التالية: 1. تنزيل وفك تشفير ملف التهيئة الذي يحتوي على كلمة مرور المسؤول للكاميرا. 2. تنزيل الصور باستمرار كل ثانية. 3. تحويل سلسلة من الصور التي تم تنزيلها إلى فيديو. المتطلبات بايثون 3.x الحزم...

CVE-2025-8110-Gogs-RCE-Exploit

Gogs CVE-2025-8110 RCE Exploit أداة استغلال آلية بلغة Python لـ CVE-2025-8110 في Gogs. تسمح هذه الثغرة بتنفيذ الأوامر عن بُعد RCE عن طريق استغلال واجهة برمجة التطبيقات PutContents، التي تفشل في التحقق مما إذا كان مسار الملف رابطًا رمزيًا. من خلال الكتابة فوق الملف الداخلي .git/config عبر رابط رمز...

CVE-2025-65964

n8n Git Hooks CTF عرض توضيحي ⚠️ هذا المستودع مخصص للأغراض التعليمية والتوضيحية لـ CTF فقط. السيناريو منصة أتمتة مثل n8n تستخدم عمليات Git كجزء من سير العمل. يسمح سير العمل بتكوين Git عشوائي عبر git config. يقوم سير العمل المسيطر عليه من قبل المهاجم بتعيين: core.hooksPath=hooks/ سوف يقوم Git بعد ذل...