CVE-2022-22965

Spring4ShellCVE-2022-22965 ثغرة RCE في إطار عمل Spring عبر ربط البيانات Data Binding على JDK 9+ / spring4shell / CVE-2022-22965 عرض توضيحي لاستغلال Spring4ShellCVE-2022-22965 https://user-images.githubusercontent.com/57348147/161458377-44ab2f76-f947-4599-aa0a-92cbaac819f8.mp4 البناء docker pull...

Vulnerability handling in Atlassian Data Center products

The vulnerability exists in several products within the Atlassian Data Center platform, including Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible, and Fisheye. The vulnerability is an Arbitrary File Access issue, allowing unauthorized attackers to access...

CVE-2026-105865 Payload: Incomplete validation during the upload file lifecycle

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can update or delete uploads stored locally can cause file cleanup to remove unintended files outside the configured upload...

CVE-2026-105865 Payload: Incomplete validation during the upload file lifecycle

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can update or delete uploads stored locally can cause file cleanup to remove unintended files outside the configured upload...

CVE-2026-105865

The Payload headless content management system is vulnerable to a path traversal issue in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . An authenticated user with permissions to update or delete locally stored uploads can trigger a file cleanup process that removes unintende...

CVE-2026-105865 Payload: Incomplete validation during the upload file lifecycle

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can update or delete uploads stored locally can cause file cleanup to remove unintended files outside the configured upload...

cve-2025-1323

cve-2025-1323 إضافة WP-Recall - حقن SQL ⚠️ إخلاء مسؤولية قانوني هذه الأداة مخصصة لاختبار الأمان المصرح به وللاستخدام التعليمي فقط. لا تستخدمها ضد أي نظام دون إذن صريح. قد يكون الاستخدام غير المصرح به غير قانوني. ✅ المتطلبات Python 3.x وحدة requests تثبيت التبعيات: pip install requests python...

FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system...

CVE-2026-105861 Payload external upload trust validation issue

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Rafie Muhammad in WordPress Plugin MainWP Child versions = 6.2.1...

aisecplus-week01-danielossai

🔐 AISec Plus — الأسبوع 1: رسم خريطة التهديد الباحث: Daniel Ossai Repo: aisecplus-week01-danielossai مقدم: الأسبوع 1 · معسكر AISec Plus 📌 اسم الحادث والتاريخ EchoLeak CVE-2025-32711 اكتُشف: يناير 2025 · أُفصح عنه: يونيو 2025 · صُحّح: يونيو 2025 📝 ماذا حدث اكتشف باحثون في Aim Security ثغرة خطيرة من...

cacti-rce-cve-2022-46169-vulnerable-application

Cacti v1.2.22 حقن أوامر CVE-2022-46169 تطبيق ضعيف هذا تطبيق ضعيف لاختبار استغلال ثغرة Cacti CVE-2022-46169. تحذير! يحتوي هذا التطبيق على ثغرات أمنية خطيرة. قم بتشغيله على مسؤوليتك الخاصة! يُوصى باستخدام بيئة مدعومة ومعزولة مثل جهاز افتراضي مع لقطة حديثة وشبكة مضيفة فقط. لا تقم برفع هذا التطبيق إل...

SnipRecover-CLI

SnipRecover CLI اكتشاف واستعادة صور Windows Snipping Tool بصيغة PNG المعرضة لثغرة CVE-2023-28303 SnipRecover CLI هو أداة سطر أوامر بسيطة وخالية من التبعيات، صُممت من أجل: اكتشاف ملفات PNG التي عدّلتها ثغرة Windows Snipping Tool CVE-2023-28303. استعادة الصورة الأصلية عبر استرداد البيانات المضغوطة...

grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default

A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation...

grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default

A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation...

CVE-2026-27886

CVE-2026-27886 استغلال Strapi PoC للاختبارات الأمنية المصرح بها فقط. تسريب Strapi للبيانات الحساسة عبر التصفية العلائقية بسبب نقص تعقيم الاستعلامات. يتضمن: CVE-2026-27886.py - PoC بلغة Python CVE-2026-27886.yaml - قالب Nuclei للكشف ما يتحقق منه يرسل المدقق طلبين إلى نقطة نهاية مجموعة واجهة برمجة...

CVE-2026-105797

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization ordering flaw in POST /api/user/plugins allows an authenticated low-privileged user to omit the top-level MCP type so tha...

openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy

A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...

openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client

A flaw was found in OpenSSH. A use-after-free vulnerability exists in the ssh client when handling concurrent remote-forwarding operations. This can occur if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. A...

Important: Red Hat Security Advisory: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...