CVE-2024-50379-POC

استغلال CVE-2024-50379 وإثبات المفهوم POC يحتوي هذا المستودع على إثبات مفهوم POC للثغرة CVE-2024-50379 ، وهي ثغرة تؤثر على Apache Tomcat. تتعلق المشكلة بشرط سباق Time-of-Check Time-of-Use TOCTOU ، والذي يمكن أن يؤدي إلى تنفيذ التعليمات البرمجية عن بُعد RCE ، خاصة على أنظمة الملفات غير الحساسة لحا...

CVE-2025-65345

CVE-2025-65345 – تجاوز المسار المُصادق عليه من وظيفة الضغط يؤدي إلى كشف نظام الملفات في laravel-file-manager v3.3.1 🧭 نظرة عامة ثغرة تجاوز الدليل المُصادق عليه في laravel-file-manager v3.3.1 والإصدارات الأقدم تسمح للمهاجمين الذين لديهم وصول إلى واجهة مدير الملفات باستخدام وظيفة الضغط/الأرشفة لإنش...

CVE-2025-40271

🔴 CVE-2025-40271 : Vulnérabilité Critique Use-After-Free dans le Noyau Linux 🛡️ Détails de la Vulnérabilité Le CVE-2025-40271 est une vulnérabilité critique de type Use-After-Free UAF qui affecte le système de fichiers /proc du noyau Linux. La faille réside dans la fonction procreaddirde , chargée...

kata-cve-2020-2023-poc

kata-cve-2020-2023-poc 1. Environnement de reproduction Remarque : L'environnement doit supporter KVM https://github.com/ssst0n3/dockerarchive/tree/branchubuntu-20.04docker-ce-19.03.11containerd.io-1.4.9kata-1.11.0 $ git clone https://github.com/ssst0n3/dockerarchive.git $ cd dockerarchive $ git...

CVE-2025-9074

CVE-2025-9074 – Évasion complète de Docker sur Docker Desktop Windows et macOS 📌 Description Docker Desktop expose l’API du moteur Docker interne à l’adresse http://192.168.65.7:2375 à tout conteneur en cours d’exécution — sans authentification ni contrôle d’accès. Étant donné que le moteur...

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

MAL-2026-17664 Malicious code in wix-ssr-thunderbolt-grid-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e0013701f6ab53085883b09092f0cd5ae9aaaab51a9f0e9de5aa68946ae9e1 The package ships two minified bundles — dist/poc-model.bundle.min.js and dist/poc-bootstrap.bundle.min.js — that are wired as the model and bootstra...

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

CVE-2026-94580

A path traversal vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 10.0.1 , specifically within the component handling USB storage operations . An authenticated user with USB management privileges can manipulate requested target paths to bypass intende...

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

EUVD-2026-94683

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

Gradio > 4.19.1 UploadButton - Path Traversal

gradio-app/gradio is vulnerable to a local file inclusion vulnerability due to improper validation of user-supplied input in the UploadButton component. id: CVE-2024-1728 info: name: Gradio 4.19.1 UploadButton - Path Traversal author: isacaya severity: high description: | gradio-app/gradio is...

PT-2026-107800

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

CVE-2025-6019-Exploitation

CVE-2025-6019 – ثغرة ResizeFilesystem في UDisks2 إعادة إنتاج تعليمية يُوثّق هذا المستودع إعادة إنتاج تعليمية لـ CVE-2025-6019 تم إجراؤها في بيئة مختبرية خاضعة للتحكم جهاز افتراضي Ubuntu، غير إنتاجي. 🛡️ إشعار أمني يقوم هذا البحث بإعادة إنتاج CVE-2025-6019 في بيئة Ubuntu معزولة لتحليل السبب الجذري...

cve-2021-41773-exploration

Aperçu CVE-2021-41773 est une vulnérabilité de traversée de chemin découverte dans Apache HTTP Server 2.4.49 en octobre 2021. La cause première était un échec à normaliser correctement les séquences de points terminées dans l'URL avant de vérifier si le chemin demandé restait dans la racine web...

CVE-2026-42616

A flaw was found in NTFS-3G. An attacker can trigger a heap buffer overflow in the ntfscat utility by providing a specially crafted NTFS filesystem image. When the utility attempts to read a file from the malicious image, heap memory is corrupted, which can lead to a Denial of Service DoS crash o...

GHSA-G8RX-F7M5-7794 Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions

Impact An authenticated user who can execute an eligible template and influence an allowed Bitbucket repository could affect filesystem paths outside the expected working area. Depending on the backend deployment, this could compromise backend confidentiality, integrity, or availability. Patches ...

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions

Impact An authenticated user who can execute an eligible template and influence an allowed Bitbucket repository could affect filesystem paths outside the expected working area. Depending on the backend deployment, this could compromise backend confidentiality, integrity, or availability. Patches ...

CVE-2026-80855

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. A local user could exploit this by opening a file with the OTRUNC flag, which attempts to truncate the file. If a signal interrupts the Direct Access DAX page invalidation process during this operation, a lock can be...

DRUPAL-CONTRIB-2026-217

Advanced File System turns Drupal's file storage into a manageable, observable and maintainable subsystem. The Advanced Filesystem: Backup submodule does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions throug...