CrafterCMS-CVE-2025-6384

CrafterCMS Authenticated RCE - Groovy Sandbox Bypass CVE-2025-6384 إثبات مفهوم لثغرة تنفيذ الأوامر عن بُعد RCE مصادق عليها في CrafterCMS. ملخص الثغرة يمكن للمستخدم المصادق الذي لديه صلاحيات مطور تجاوز صندوق الحماية الخاص بنصوص Groovy في Crafter Studio لتحقيق تنفيذ الأوامر عن بُعد RCE. يفشل صندوق...

CVE-2025-55182_full_exploit

CVE-2025-55182fullexploit يحتوي هذا المستودع على استغلال كامل لثغرة CVE-2025-55182 مع RCE خطوات تشغيل الاستغلال 1. تثبيت التبعيات pip install -r requirements.txt 2. تشغيل الاستغلال python3 exploit.py targetlist.txt "command"...

pwnfest2016

pwnfest2016 استغلال كامل لـ cve-2016-9651 المستخدم في pwnfest2016، الشرائح والنص الكامل لـ syscan360 2017...

CVE-2025-2783

Chromium CVE-2025-2783 : Évasion de bac à sable et exploitation RCE en chaîne complète Ce dépôt contient une implémentation d'exploitation en chaîne complète pour CVE-2025-2783. La vulnérabilité réside dans la couche de communication Ipcz de Chromium, permettant à un attaquant de réaliser une...

CVE-2026-58574

Dell PowerStore is affected by a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface can read internal system information from the appliance filesystem. This may expose sensitive information and credent...

CVE-2025-55182-analysis

تحليل تقني لـ CVE-2025-55182: رحلتي البحثية ⚠️ إخلاء مسؤولية مهم توثّق هذه الوثيقة عملية بحثي الشخصية في CVE-2025-55182، بما في ذلك النتائج المؤكدة والتجارب التي أجريتها. وهي تمثّل سردًا صادقًا لتحقيقي، بما في ذلك الافتراضات الخاطئة الأولية والاختراق النهائي. الملخص التنفيذي بعد تحقيق موسّع في...

CVE-2025-42957-SAP-S-4HANA-Under-Siege

CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – क्या हुआ? अगस्त 2025 में, SAP के प्रमुख ERP प्लेटफ़ॉर्म S/4HANA में एक RFC-सक्षम फ़ंक्शन मॉड्यूल में कमज़ोरी पाई गई। केवल निम्न-विशेषाधिकार low-privileged पहुँच वाले हमलावर उस मॉड्यूल में मनमाना ABAP कोड इंजेक्ट कर सकते हैं, सामान्य प्राधिकरण जाँचों को...

CVE-2026-48908

🚨 CVE-2026-48908 — Full Server Compromise via Arbitrary File Upload Critical Unauthenticated File Upload → Remote Code Execution RCE A critical vulnerability in SP Page Builder allows unauthenticated attackers to upload arbitrary files and achieve Remote Code Execution RCE , potentially leading t...

MAL-2026-15602 Malicious code in redis-cookie-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c94026a508b2ada8c891551c8ccd622f86c2ba2e7b6a7c181fc3eb538e2f1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in eslint-prettier-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c75af75154da75ac5073b9dcea65c04bdb3f493f3a72d79f1847df90bf449 The package's postinstall hook runs index.cjs's onInstall, which performs await fetch"https://2939e69fc408.ngrok-free.app/stats" and passes the...

Malicious code in redis-cookie-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c94026a508b2ada8c891551c8ccd622f86c2ba2e7b6a7c181fc3eb538e2f1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15601 Malicious code in eslint-prettier-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c75af75154da75ac5073b9dcea65c04bdb3f493f3a72d79f1847df90bf449 The package's postinstall hook runs index.cjs's onInstall, which performs await fetch"https://2939e69fc408.ngrok-free.app/stats" and passes the...

Important: Red Hat Security Advisory: mingw-sqlite security update

An update for mingw-sqlite is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

AlmaLinux 8 : mingw-sqlite (ALSA-2026:61242)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:61242 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 Tenable has extracted the preceding description block directly from...

Important: mingw-sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

ALSA-2026:61242 Important: mingw-sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

Malicious code in real-browser-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276e32a0246539a0495937fdf1967c9f2c778d4e902f14bc921148e4edbb0648 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15587 Malicious code in real-browser-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276e32a0246539a0495937fdf1967c9f2c778d4e902f14bc921148e4edbb0648 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in originaldevelopmentstelemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60940a80ca72863b54a3cc8f1cc7da49be77b38e9111d4cb77cfc1417671f399 The package is advertised as a telemetry utility but its sole exported function, downloadAndRunClient, downloads updater.hta from...

MAL-2026-15586 Malicious code in originaldevelopmentstelemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60940a80ca72863b54a3cc8f1cc7da49be77b38e9111d4cb77cfc1417671f399 The package is advertised as a telemetry utility but its sole exported function, downloadAndRunClient, downloads updater.hta from...