EUVD-2026-70299

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2026-85089 FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2026-85089 FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2021-46702

CVE-2021-46702 الوصف: متصفح Tor 9.0.7 على نظام Windows 10 build 10586 معرّض لخطر كشف المعلومات. قد يسمح هذا للمهاجمين المحليين بتجاوز ميزة إخفاء الهوية المقصودة والحصول على معلومات حول خدمات البصل onion services التي زارها مستخدم محلي. يمكن تحقيق ذلك من خلال تحليل ذاكرة RAM حتى بعد عدة ساعات من...

CVE-2025-53640

CVE-2025-53640 – CERN के Indico में प्रमाणित उपयोगकर्ता गणना BOLA भेद्यता CVE-2025-53640 का PoC और तकनीकी विश्लेषण: Indico में एक Broken Object Level Authorization BOLA भेद्यता जो एंडपॉइंट के माध्यम से प्रमाणित उपयोगकर्ता गणना को सक्षम करती है, नाम, ईमेल और संबद्धता उजागर करती है। इसमें शोषण...

CVE-2026-33032-nginx-ui-vuln-lab

CVE-2026-27944 + CVE-2026-33032 — مختبر استغلال nginx-ui بدون بيانات اعتماد إخلاء مسؤولية: هذا المستودع مخصص لأغراض البحث الأمني التعليمي والمصرح به فقط. يجب استخدام جميع التقنيات الموضحة هنا فقط ضد الأنظمة التي تملكها أو لديك إذن كتابي صريح لاختبارها. لا يتحمل المؤلفون أي مسؤولية عن سوء الاستخدا...

-nginxui_discover

ماسح اكتشاف واجهة Nginx UI - كاشف الإصدار CVE-2026-27944 https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/threading-multi--threaded-brightgreen المؤلف: NULL200OK ماسح عالي الأداء متعدد الخيوط لاكتشاف واجهات الويب الخاصة ...

CVE-2021-43798

CVE-2021-43798 نص برمجي للتحقق الجماعي مكتوب بلغة golang، يتضمن 48 عملية تحقق الكثيرون كتبوه بلغة python، حاولت تعلم golang الاستخدام احفظ عناوين URL في ملف url.txt ثم قم بتشغيل go run CVE-2021-43798.go في الدليل الحالي، وسيتم حفظ العناوين التي تحتوي على الثغرة في ملف test.txt الاستغلال بعد التحق...

CVE-2001-0933

CVE-2001-0933 Cooolsoft PowerFTP Server 2.03 दूरस्थ हमलावरों को एक ls LIST कमांड के माध्यम से मनमाने ड्राइव की सामग्री सूचीबद्ध करने की अनुमति देता है जिसमें तर्क के रूप में ड्राइव अक्षर शामिल है, उदाहरण के लिए "ls C:"। Securiteam प्रकाशन यहाँ: http://www.securiteam.com/exploits/6D00L2A35K.html...

CVE-2026-42533-nginx

CVE-2026-42533 nginx This repository contains a Go-based scanner for identifying nginx configuration patterns associated with the complexvalue two-pass capture-clobbering issue described in CVE-2026-42533. Overview The tool analyzes nginx configuration files and directories to detect risky...

CVE-2026-4106

CVE-2026-4106: WordPress HT Mega Unauthenticated PII Disclosure Exploit A robust, multi-threaded Proof of Concept PoC exploit for CVE-2026-4106 , targeting the HT Mega - Absolute Addons for Elementor plugin for WordPress versions 3.0.7. Vulnerability Overview The HT Mega plugin registers several...

CVE-2025-14847-MongoDB

CVE-2025-14847-MongoDB Memory Disclosure Research Tool Overview This repository contains an educational research tool designed to demonstrate the memory safety concepts behind CVE-2025-14847, a critical vulnerability discovered in MongoDB's BSON decompression implementation. The tool simulates ho...

PT-2026-85205

Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.8, from 9.0.0 before 9.0.8, all other EOL versions from 4.5.0. The vulnerability allows an unauthenticated user to get WHMCS customer's data via 2Checkout payment gateway's endpoi...

PT-2026-85306

Out-of-bounds read vulnerability in Samsung Opensource Escargot allows Overread Buffers. This issue affects Escargot: 25648aef19187b3f87f4d9420b8d761453ad4630...

CVE-2025-11973

ट्रिगर: file:// के माध्यम से /etc/passwd पढ़ें और uploads में एक्सफ़िलट्रेट करें root@kitploit: curl -sS -A "$UA" -X POST "$BASE/?kdsflag=post" \ --data-urlencode "kdspassword=$SECRET" \ --data-urlencode "posttitle=sub1-lfi" \ --data-urlencode "kdsfeatureurl=file:///etc/passwd" एक्सफ़िलट्रेट की ग...

CVE-2025-12137

1 प्लगइन के REST API को वर्तमान nonce के साथ कॉल करने का सहायक फ़ंक्शन root@kitploit: async function iwpFetchpath, method='GET', body const nonce = window?.wpApiSettings?.nonce || jQuery?.ajaxSettings?.headers?.'X-WP-Nonce'; const res = await fetch$location.origin/wordpress/wp-json/iwp/v1$path,...

CVE-2026-25049

🚨 CVE-2026-25049 – n8n Unauthenticated Settings Disclosure 📌 Overview CVE ID: CVE-2026-25049 Affected Software: n8n Severity: Critical Category: Improper Access Control / Information Disclosure This vulnerability allows unauthenticated access to internal configuration data via a REST API endpoint...

CVE-2022-26xx9

CVE-2022-26xx9 CVE-2022-26xx9...

CVE-2025-69295

CVE-2025-69295 — TeconceTheme Coven Core Blind SQL Injection Vulnerability CVE-2025-69295 is a SQL Injection vulnerability affecting the Coven Core component of the TeconceTheme Coven Core WordPress theme. The vulnerability exists due to improper neutralization of user-supplied input before it is...

CVE-2025-69428

Security Advisory - CVE-2025-69428 Title: Unauthenticated Access to Sensitive Directory Information Disclosure CVE-ID: CVE-2025-69428 Description A critical access control vulnerability in locally deployed Pro-Bit application in versions less than v1.77.4 allows unauthenticated attackers to...