CVE-2026-104807

The Mitel MiVoice Office 400 web portal is vulnerable to a stored Cross-Site Scripting (XSS) flaw (CWE-79). The issue resides in the Configuration → Domains section, specifically within the "Description" field, where the application fails to properly validate or sanitize user-supplied input befor...

SUSE-SU-2026:4441-1 Security update for kubevirt-1.6

This update for kubevirt-1.6 fixes the following issues: - Package the persistent-reservation helper's entrypoint script bsc1276520: virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into place and then execs qemu-pr-helper. Only...

Configuration Bypass

Apache Kyuubi is vulnerable to configuration bypass. The vulnerability is due to an incomplete security fix, where client‑controlled unprefixed Spark config aliases can bypass the server‑side kyuubi.session.local.dir.allowlist setting and attackers can exploit it by accessing the Kyuubi Server vi...

wazuh-nginx-cve-2026-42945-sca-lab

CVE-2026-42945 — Laboratoire défensif NGINX Wazuh SCA Présentation Ce dépôt documente un laboratoire défensif pour CVE-2026-42945 , affectant le module ngxhttprewritemodule de NGINX. L'objectif de ce projet était d'aborder la CVE d'un point de vue blue team en utilisant Wazuh Security Configurati...

CVE-2023-23752

CVE-2023-23752 - إعادة إنتاج ثغرة الوصول غير المصرح به في Joomla استخدام السكربت تثبيت مكتبات بايثون pip install -r requirements.txt التحقق من الثغرة python3 CVE-2022-26134check.py -u url -c whoami المسح الجماعي python3 CVE-2023-23752.py -f urlpart.txt الإصدارات المتأثرة 4.0.0 = Joomla = 4.2.7...

web-server-audit_CVE-2026-42945

webserveraudit Ne demandez pas si vous êtes vulnérable. Demandez si vous êtes exploitable. Outil Python mono-fichier qui audite nginx et Apache face aux CVE connues en vérifiant à la fois la version installée et si le chemin de code vulnérable est réellement accessible via votre configuration...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Chaîne d'exploitation proof-of-concept que j'ai découverte, assignée sous CVE-2026-47301 pour Microsoft Configuration Manager SCCM, combinant un contrôle d'accès défaillant, une écriture arbitraire de fichier par traversée de chemin lors de...

cve-2021-41773

Rapport CVE-2021-41773 – Path Traversal Apache Résumé Vulnérabilité découverte dans Apache HTTP Server 2.4.49, permettant, selon la configuration du serveur web, d'exposer des fichiers sensibles du système via une attaque de Path Traversal. Path Traversal : un attaquant peut accéder à des fichier...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 Guide d'élévation de privilèges English 📋 Étapes d'exploitation rapides Étape 1 : Préparer l'image XFS Machine locale Créer une image XFS de 300 Mo dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Monter et installer le SUID bash mkdir mnt sudo moun...

CVE-2026-105294

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. Attackers exploiting a Discord XSS can set additionalArguments to persistently add --proxy-server and...

CVE-2026-105294 Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. Attackers exploiting a Discord XSS can set additionalArguments to persistently add --proxy-server and...

CVE-2026-105294

Legcord versions 1.1.0 through 1.3.0 are vulnerable to a configuration injection vulnerability via the window.legcord settings.setConfig bridge. This flaw allows scripts running on the Discord page to write arbitrary configuration keys. If an attacker leverages a Discord XSS , they can modify add...

CVE-2026-105294 Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. Attackers exploiting a Discord XSS can set additionalArguments to persistently add --proxy-server and...

CVE-2026-105294 Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. Attackers exploiting a Discord XSS can set additionalArguments to persistently add --proxy-server and...

EUVD-2026-92158

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. Attackers exploiting a Discord XSS can set additionalArguments to persistently add --proxy-server and...

CVE-2019-0232

بيئة الثغرة Tomcat 8.5.39 Jdk 8u121 تحرير ملف web.xml cgi org.apache.catalina.servlets.CGIServlet debug 0 cgiPathPrefix WEB-INF/cgi-bin executable 5 cgi /cgi-bin/ تحرير ملف content.xml WEB-INF/web.xml $catalina.base/conf/web.xml --...

CVE-2026-105676: Improper Limitation of a Pathname to a Restricted Directory

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...

ROS-20261005-73-0023

The vulnerability in rsync is related to incorrect input of configuration data. The vulnerability can be exploited remotely...

Fedora 43 : python-streamlink / python-urllib3 (2026-72a7879d08)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-72a7879d08 advisory. Update python-urllib3 to version 2.8.0, fixing three security issues: - The TLS configuration for HTTPS proxies could be ignored or overridden. Rated high...

PT-2026-104773

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening...