CVE-2024-34693

استغلال CVE-2024-34693 يحتوي هذا المستودع على سكربت بايثون متطور لاستغلال ثغرة CVE-2024-34693 في Apache Superset. يقوم السكربت بإعداد خادم MySQL مزيف وإنشاء اتصال MariaDB خبيث لسرقة محتوى ملف محدد من النظام المستهدف...

CVE-2026-105699

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.6.8 until 1.9.1, Langflow authenticated access to the project identifier in a project-scoped MCP connection but did not authorize the resource URI supplied to resources/read. readresource forwarded the...

CVE-2023-38146-Poc

ThemeBleed CVE-2023-38146 एक्सप्लॉइट Windows 11 थीम्स का PoC यह https://github.com/gabe-k/themebleed से काफी प्रेरित है, जो केवल विंडोज़ पर चलता है यही कारण है कि मैंने इसे लिखने का निर्णय लिया। impacket smbserver.py https://github.com/fortra/impacket/blob/master/impacket/smbserver.py से संशोधित...

CVE-2020-14292

CVE-2020-14292: مشكلة في ناقل البلوتوث في تطبيق COVIDSafe المؤلف: Alwen Tiu، الجامعة الوطنية الأسترالية آخر تحديث: 2020-09-08 الملخص في تطبيق COVIDSafe حتى الإصدار 1.0.21 لنظام Android، يؤدي الاستخدام غير الآمن لخيار نقل البلوتوث في اتصال GATT إلى السماح للمهاجمين بخداع التطبيق لإنشاء اتصال عبر...

CVE-2018-10583

CVE-2018-10583 تحدث ثغرة كشف المعلومات عندما يقوم كل من LibreOffice 6.0.3 وApache OpenOffice Writer 4.1.5 تلقائيًا بمعالجة وبدء اتصال SMB مضمن في ملف ضار، كما هو موضح في "xlink:href=file://192.168.0.2/test.jpg" داخل عنصر "office:document-content" في مستند ".odt XML". http://bit.ly/2w9mU1n...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py एक Python स्क्रिप्ट है जिसे ServiceNow इंस्टेंसेस में विशिष्ट कमजोरियों का पता लगाने और कमजोरी मिलने पर डेटाबेस कनेक्शन विवरण डंप करने के लिए डिज़ाइन किया गया है। यह उपकरण विशेष रूप से सुरक्षा शोधकर्ताओं और पैठ परीक्षकों के लिए उपयोगी है। विशेषताएं ServiceNow में कि...

sqlpad-rce-exploit-CVE-2022-0944

SQLPad RCE शोषण यह रिपॉजिटरी SQLPad में CVE-2022-0944 के लिए एक शोषण स्क्रिप्ट शामिल करती है, एक कमजोरी जो /api/test-connection एंडपॉइंट के माध्यम से रिमोट कोड निष्पादन RCE की अनुमति देती है। अवलोकन प्रदान की गई स्क्रिप्ट exploit.py SQLPad में RCE कमजोरी का शोषण करने का तरीका प्रदर्शित करती है।...

Astra Linux – Vulnerability in curl

libcurl will reuse a previously established connection even when options related to TLS or SSH have been changed, which should prevent such reuses. libcurl stores previously used connections in a connection pool, allowing for reuse if one of them matches the current setup. However, several TLS an...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The UAF issue in ksmbdtcpnewconnection has been fixed. The race that occurs is between the process of handling a new TCP connection and its disconnection. This causes a UAF error in the struct tcptransport structure within...

Malicious code in eth-keystore-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in rate-limit-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in req-throttle-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17568 Malicious code in req-throttle-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

[SECURITY] Fedora 43 Update: pgbouncer-1.26.0-1.fc43

pgbouncer is a lightweight connection pooler for PostgreSQL and uses libevent for low-level socket handling...

CVE-2026-3805-curl-SMB-UAF

CVE-2026-3805: استخدام الذاكرة بعد تحريرها Use-After-Free في إعادة استخدام اتصال SMB في curl اكتشفت ثغرة استخدام الذاكرة بعد تحريرها use-after-free في معالج بروتوكول SMB في libcurl. عندما يعيد نقل SMB ثانٍ استخدام اتصال قائم إلى نفس الخادم، يكون مسار الملف للطلب الجديد req-path مؤشرًا معلّقًا إلى...

[SECURITY] Fedora 44 Update: pgbouncer-1.26.0-1.fc44

pgbouncer is a lightweight connection pooler for PostgreSQL and uses libevent for low-level socket handling...

CVE-2026-33829

CVE-2026-33829 यह रिपॉजिटरी एक Bash-आधारित स्वचालित उपकरण रखता है जो निष्क्रिय और नियंत्रित तरीके से यह ऑडिट और सत्यापित करने के लिए डिज़ाइन किया गया है कि क्या Windows ऑपरेटिंग सिस्टम वाली संपत्तियाँ search: प्रोटोकॉल हैंडलर के असुरक्षित हेरफेर के प्रति संवेदनशील हैं। स्क्रिप्ट एक निष्क्रिय रिसी...

PT-2026-106234

Name of the Vulnerable Software and Affected Versions Langflow versions 1.6.8 through 1.9.0 Description Langflow fails to properly authorize the resource URI provided to the resources/read endpoint. The read resource function forwards the attacker-controlled URI to handle read resource, which...

Cisco ASA Insufficient Session Expiration (CVE-2021-1501)

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...

Fedora 45 : curl (2026-663a2d0ba4)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-663a2d0ba4 advisory. - fix HTTP/2 server push UAF CVE-2026-18924 - fix Negotiate ambient user conn reuse CVE-2026-19931 - remove test1701 - HTTP/2 Upgrade in a HTTP/1.1...