CVE-2026-1529

أداة استغلال ثغرة CVE-2026-1529 في Keycloak CVE-2026-1529 : Keycloak - تسجيل مؤسسة غير مصرح به عبر التحقق غير السليم من رمز الدعوة ⚠️ تحذير : هذه الأداة مخصصة لأغراض الاختبار الأمني التعليمي والمصرح به فقط. الوصول غير المصرح به إلى أنظمة الكمبيوتر غير قانوني. 📋 جدول المحتويات نظرة عامة الميزات...

Terrminus-CVE-2026-2406

Terminus - إطار عمل الماسح والاستغلال لـ CVE-2026-24061 محرك تحليل أمني لثغرة تجاوز مصادقة Telnet NEWENVIRON وتصعيد الامتيازات CVE-2026-24061. نظرة عامة Terminus هو أداة بحث أمني احترافية مصممة لاختبار الاختراق المصرح به وتقييم الثغرات لـ CVE-2026-24061. تؤثر هذه الثغرة الحرجة على تطبيقات خادم...

RAMnesia-Attack

यह शोध आधुनिक कंप्यूटर सिस्टमों के हार्डवेयर मेमोरी DDR5 मेमोरी पर दो महत्वपूर्ण प्रकार के हमलों का व्यापक विश्लेषण प्रस्तुत करता है: Phoenix Rowhammer Attack CVE-2025-6202 और RAMnesia Attack CVE-2023-39910 । दोनों हमले क्रिप्टोग्राफिक सामग्री के प्रसंस्करण और भंडारण में मूलभूत कमजोरियों को...

CVE-2026-67620-poc — Updated!

CVE-2026-67620 — Flowise SSRF via incomplete cloud-metadata deny-list Oracle OCI + Alibaba Cloud Product: FlowiseAI/Flowise — visual LLM / AI-agent builder 54k ★ Affected versions: ≤ 3.1.4 — confirmed still vulnerable in 3.1.4 , the latest release re-verified 2026-08-06 Vulnerability: Server-Side...

CVE-2021-4034

CVE-2021-4034 — PwnKit स्थानीय विशेषाधिकार वृद्धि · मास्टर थीसिस अनुसंधान -orange polkit की pkexec उपयोगिता में मेमोरी भ्रष्टाचार भेद्यता सीमा से बाहर लेखन के माध्यम से स्थानीय विशेषाधिकार वृद्धि → रूट प्रभावित: polkit 0.105-31 और पुराने · पैच: polkit 0.105-33 जनवरी 2022 CVE-2021-4034 - PwnKit के...

pac4j-check v0.2.0

pac4j-check 离线排查 CVE-2026-29000CVSS 10.0—— 包括官方 advisory 没有列出的那些包。 English | 中文 单个 jar,约 24KB,零运行时依赖,Java 8 起可用,完全离线,不外传任何数据。 这个漏洞是什么 org.pac4j:pac4j-jwt 的 JwtAuthenticator 在处理加密 JWTJWE 时未强制校验签名。 攻击者只要拿到服务器的 RSA 公钥公钥本来就是公开的, 就能构造一个 JWE 包裹的 PlainJWT,把 subject 和 role 写成任意值, 以任意用户身份登录,包括管理员 。无需任何凭据。...

CVE-2026-28289

🚨 CVE-2026-28289 — "Mail2Shell" ثغرة تنفيذ أكواد عن بُعد RCE بدون أي نقرة ودون مصادقة في FreeScout عبر تجاوز فحص مرفقات البريد الإلكتروني 📖 نظرة عامة CVE-2026-28289 ، التي تُعرف باسم Mail2Shell ، هي ثغرة حرجة من نوع تنفيذ الأكواد عن بُعد RCE بدون أي نقرة Zero-Click تؤثر على FreeScout. يمكن للمهاج...

SUSE CVE-2026-84373

Vitest is a testing framework powered by Vite. From 2.1.0 until 4.1.11 and 5.0.0-rc.2, the public mockerPlugin and standalone interceptorPlugin exports in packages/mocker/src/node/interceptorPlugin.ts register the vitest:interceptor:register handler on Vite's unauthenticated HMR WebSocket without...

RockyLinux 8 : freerdp (RLSA-2026:62571)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62571 advisory. FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders CVE-2026-67301 FreeRDP: FreeRDP: Denial of Service via crafted...

Elastic Beats filebeat 8.0.x < 8.19.18 / 9.0.x < 9.3.1 DoS (ESA-2026-165)

The version of Elastic Beats filebeat installed on the remote host is 8.0.x prior to 8.19.18, or 9.0.x prior to 9.3.1. It is, therefore, affected by a denial of service vulnerability. - Allocation of Resources Without Limits or Throttling CWE-770 in Filebeat can lead to a denial of service via...

The vulnerability of the __ftrace_event_enable_disable() function in the kernel/trace/traceevents.c module, which supports Linux operating system kernel tracing, allows a attacker to cause a service failure.

The vulnerability of the ftraceeventenabledisable function in the kernel/trace/traceevents.c module, which supports Linux operating system’s kernel tracing, is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the nested_sync_control_from_vmcb02() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nestedsynccontrolfromvmcb02 function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow ...

The vulnerability of the usblp_probe() function in the drivers/usb/class/usblp.c file of the Linux operating system’s USB device driver module allows a malicious actor to cause a service failure.

The vulnerability of the usblpprobe function in the drivers/usb/class/usblp.c file of the Linux device driver for USB devices is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability in the function amdgpu_dm_hpd_init() of the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c driver module of the Direct Rendering Infrastructure (DRI) graphics card driver for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the amdgpudmhpdinit function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmirq.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker...

The vulnerability of the iscsit_close_session() function in the drivers/target/iscsi/iscsi_target.c file of the Linux kernel’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iscsitclosesession function in the drivers/target/iscsi/iscsitarget.c file of the Linux kernel’s TCM driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the sock_recv_cmsgs() function in the include/net/sock.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sockrecvcmsgs function in the include/net/sock.h module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mpi3mr_probe() function in the drivers/scsi/mpi3mr/mpi3mr_os.c file of the Linux operating system’s SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mpi3mrprobe function in the drivers/scsi/mpi3mr/mpi3mros.c file of the Linux SCSI device driver module is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the bfqq_request_over_limit() function in the block/bfq-iosched.c module exposes the block-level support for the Linux operating system, allowing a hacker to cause a service failure.

The vulnerability of the bfqqrequestoverlimit function in the block/bfq-iosched.c module related to Linux’s block-level kernel support involves errors related to division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bareudp_fillmetadata dst() function in the drivers/net/bareudp.c module of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the bareudpfillmetadatadst function in the drivers/net/bareudp.c module of the Linux kernel network device driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ctrlcmd_bye() function in the net/qrtr/ns.c module allows a hacker to trigger a service failure for Qualcomm IPC kernel-based Linux operating systems.

The vulnerability of the ctrlcmdbye function in the net/qrtr/ns.c module, which supports Qualcomm IPC cores in the Linux operating system, relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service...