Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fixed the use-of-memory issue related to metadatadst during RX SC deletion. When an offloaded MACsec RX SC is deleted, the function macsecdelrxscctx frees the per-SC metadatadst using metadatadstfree. This...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Fixed a panic that occurred during namespace deletion with VF. The existing code moves the VF NIC to a new namespace when NETDEVREGISTER is received on the netvsc NIC. During the deletion of the namespace,...

WiseDelete

WiseDelfile Driver Wrapper Um utilitário leve para Windows que carrega o driver de kernel WiseDelfile64.sys , realiza o handshake necessário do dispositivo e envia requisições IOCTL para excluir arquivos que não podem ser removidos através das APIs padrão do Windows. Este projeto demonstra como o...

CVE-2026-48866

--- ┌───────────────────────────────────────────────────────────┐ │ │ │ C V E - 2 0 2 6 - 4 8 8 6 6 │ │ │ │ Gravity Forms Path Traversal → Arbitrary File Deletion │ │ │ └───────────────────────────────────────────────────────────┘ gformuploadedfiles...

fortinet-cve-2024-46671

CVE-2024-46671 FortiWeb waf संस्करण 7.4.3 बिल्ड 638GA में खोजी गई 0-दिन की कमजोरी एक्सप्लॉइट यह स्क्रिप्ट मुख्य रूप से एक प्रमाणित IDOR कमजोरी के शोषण को स्वचालित करती है, जिसके कारण एक लॉजिकल बग के कारण खाता हटाने और डिफ़ॉल्ट खाते को बिना पासवर्ड के पुनः-निर्माण किया जाता है एक्सप्लॉइट उपयोग...

CVE-2026-24135

CVE-2026-24135: Gogs में विकी पथ ट्रैवर्सल के माध्यम से मनमाना फ़ाइल विलोपन गंभीरता: उच्च CVSS 7.5 प्रभावित सॉफ़्टवेयर: Gogs पैच किया गया: 0.13.4, 0.14.0+dev सलाह: GHSA-jp7c-wj6q-3qf2 पैच: gogs/gogs8099 सारांश Gogs Go में लिखी गई एक लोकप्रिय स्व-होस्टेड Git सेवा की सुरक्षा ऑडिट के दौरान, मुझे...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Prova de Conceito PoC Descrição Este repositório contém um exploit de Prova de Conceito PoC para a CVE-2023-6972. A vulnerabilidade permite Exclusão Arbitrária de Arquivos AFD não autenticada no Plugin de Backup Migration do WordPress Nota: Uma análise técnica abrangente, estudo de...

CVE-2017-20285

A flaw was found in perl-yaml. An attacker can trigger unintended actions, such as arbitrary file deletion, by supplying a specially crafted YAML document. The parser permits untrusted documents to instantiate arbitrary object classes, causing Perl to automatically execute their destructor method...

EUVD-2026-92303

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-0603

CVE-2026-0603 Hibernate ORM इंजेक्शन / सेकंड-ऑर्डर SQL इंजेक्शन ★ CVE-2026-0603 Hibernate SQL इंजेक्शन PoC ★ https://github.com/user-attachments/assets/2e7c3a89-e26f-48cd-af0b-8b82d32ce71f अवलोकन CVE-2026-0603 Hibernate ORM में एक सेकंड-ऑर्डर SQL इंजेक्शन भेद्यता है, जो एक व्यापक रूप से उपयोग किय...

DEBIAN-CVE-2017-20285

YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on th...

CVE-2017-20285

YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on th...

CVE-2017-20285 YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes

YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on th...

BitLock-Crypto-Research

🛡️ BitLock Framework: Ecossistema de Criptovirologia e C2 PoC Este repositório contém uma Prova de Conceito PoC abrangente projetada para o estudo de arquiteturas de ameaças modernas. O projeto simula um ambiente de ataque fileless sem arquivos com uma infraestrutura de comando e controle C2...

CVE-2026-95264

Feehi CMS 2.1.1 is vulnerable to a Directory Traversal vulnerability (CWE-22). An authenticated backend user with article edit permissions can delete arbitrary files writable by the PHP process. The root cause is that the application uses article image metadata to construct a filesystem path, whi...

PT-2026-106280

Name of the Vulnerable Software and Affected Versions Joplin Server versions prior to 3.7.2 Description In the packages/server/src/models/TokenModel.ts file, CSRF, account-confirmation, email-change, and password-reset tokens are stored without a designated purpose. Additionally, the...

CVE-2026-105695: Missing Authorization

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...

CVE-2026-104905: Deserialization of Untrusted Data

FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...

PT-2026-104775

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...