CVE-2022-28113

Fantec MWiD25-DS شرح ثغرة CVE-2022-28113 بواسطة @code-byter ========================== هذا شرح لاستغلال راوتر السفر Fantec MWiD25-DS إصدار البرنامج الثابت: 2.000.030. تسمح هذه الثغرة لأي مستخدم غير مصرح له بتنفيذ أوامر عشوائية بصلاحيات الجذر. كما تتيح ثغرة في وظيفة النسخ الاحتياطي upload.csp لأي...

Contact Form 7 Math Captcha <= 2.0.1 - Cross-site Scripting

The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users. id: CVE-2024-6517 info: name: Contact Form 7 Math Captcha =...

CVE-2022-0918

CVE-2022-0918 صفحة Red Hat CVE: https://access.redhat.com/security/cve/cve-2022-0918 مشكلة GitHub مع التصحيحات المرتبطة: https://github.com/389ds/389-ds-base/issues/5242 PoC يقبل تطبيق PoC عنوان IP واحد، سواء IPv4 أو IPv6 سيعمل. افتراضيًا، سيرسل الرسالة إلى المنفذ 389، يمكن تغيير ذلك في المصدر...

DS-Wireless-Communication-Remote-Code-Execution

تنفيذ التعليمات البرمجية عن بُعد في الاتصال اللاسلكي لـ DS يحقن كودًا تعسفيًا في لعبة العميل. المتطلبات الأساسية Python 3.10 pip pydivert الاستخدام pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py معرّف CVE CVE-2023-45887 الترخيص GNU General Public License v2.0...

Katana

Katana-ds Katana-ds ds for dork scan is a simple python tool that automates Google Hacking/Dorking and supports Tor. It becomes a more powerful in combination with GHDB Note 25/09/2021 : This Repo is New but the script it self is old back when google dorking was something, i wrote this script bac...

CVE-2026-76578

CVE-2026-76578 — Prise de contrôle administrateur anonyme de FreeIPA Produit : FreeIPA 4.9.x – 4.13.3 Sévérité : Critique CVSS 9.8 Corrigé : FreeIPA 4.13.4 / 389-ds-base 3.2.0-10.el102 RHSA-2026:64785 Avis juridique Cette preuve de concept a été développée et exécutée exclusivement dans un...

EpSiLoNPoInT-

!/usr/bin/env python3 """ TSAR-EXEC v7.1 + EpSiLoNPoInTFuCK v5.1 - README.md Complet et Prêt à Copier-Coller CVE-2026-23550 | Framework d'Exploitation Massive Modular DS Auth Bypass Auteur: EpSiLoNPoInT | Version: 7.1-GOD | Android 24h Coding | 08/02/2026 """...

Mass-CVE-2026-23550-Exploit

🔥 CVE-2026-23550 Scanner DS Modulaire Scanner Python multi-threadé pour la vulnérabilité CVE-2026-23550 CVSS 10.0 du plugin WordPress Modular DS ≤2.5.1 affectant plus de 40 000 sites. Détecte la prise de contrôle admin non authentifiée via le contournement de getLogin avec vérification complète d...

CYBERDUDEBIVASH-Modular-DS-CVE-2026-23550-Detector

Détecteur modulaire DS CVE-2026-23550 de CYBERDUDEBIVASH Aperçu Il s'agit d'un outil autorisé de l'ÉCOSYSTÈME CYBERDUDEBIVASH pour détecter CVE-2026-23550 dans le plugin WordPress Modular DS. Il vérifie de manière non destructive les versions vulnérables = 2.5.1 en analysant le readme.txt du...

CVE-2026-23550-PoC

CVE-2026-23550-PoC CVE-2026-23550 - Plugin WordPress Modular DS Accès Admin Non Authentifié Preuve de concept PoC démontrant CVE-2026-23550 - prise de contrôle critique du compte admin sans authentification dans le plugin WordPress Modular DS versions ≤2.5.1. Exploité activement dans la nature...

CVE-2026-23550

CVE-2026-23550 Modular DS header'User-Agent'; $userAgentMatches = $userAgent && Str::is'ModularConnector/ Linux', $userAgent; $originQuery = $request-has'origin' && $request-get'origin' === 'mo'; $isFromQuery = $originQuery || $userAgentMatches && $request-has'type'; // When is wp-load.php reques...

Critical: Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.5 E4S for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

Rocky Linux 9.6 [TuxCare] Security Update: ipa-client / ipa-client-common / ipa-client-encrypted-dns / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791364402)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791364402 advisory. - A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory user...

ds-cve-plugin

Bienvenue dans ds-cve-plugin Un plugin pour DataSurgeon qui extrait les numéros CVE à partir de texte ex: CVE-2021-56789 Commencer par la gestion des plugins Ajouter un nouveau plugin Supprimer un plugin Lister tous les plugins Commencer par la création Trouver votre fichier plugin Créer votre...

CVE-2026-98345

The Linux kernel contains a vulnerability within the cfg80211 component, specifically in the cfg80211_classify8021d() function. The issue occurs when a frame mimicking an IP packet is transmitted but is too short, causing the DS field to be read incorrectly. This leads to an uninit-value error as...

CVE-2026-23550

██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ███████╗ ███████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ╚════██╗╚════██╗██╔════╝ ██╔════╝██╔═████╗ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ █████╔╝ █████╔╝███████╗ ███████╗██║██╔██║ ██║ ╚█...

PT-2026-106674

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211 classify8021d A frame that looks like IP can be transmitted, but be too short, so the DS field is read incorrectly: BUG: KMSAN: uninit-value in cfg80211 classify8021d+0x99d/0x12b0...

Astra Linux – Vulnerability in Mariadb 10.3

MariaDB Server before version 10.7 is vulnerable to Denial of Service attacks. In the file extra/mariabackup/dscompress.cc, when an error occurs i.e., transitioning to the err label during the execution of the createworkerthreads method, the held lock thd-ctrlmutex is not released properly. This...

Astra Linux – Vulnerability in the 389-DS-base

A flaw has been discovered in 389-ds-base versions 1.4.x.x prior to 1.4.1.3. When executed in verbose mode, the dscreate and dsconf commands may display sensitive information, such as the Directory Manager password. An attacker who can view the screen or record the terminal’s standard error outpu...