CVE-2019-6340

CVE-2019-6340 CVE-2019-6340 إثبات المفهوم POC لثغرة Drupal RCE python poc.py url php func command node number مثال: python poc.py http://192.168.142.148/drupal-8.6.9/ system ipconfig 200 تويتر: @0w4ys...

MSRKit

MSRKit Un outil pour appeler des fonctions du noyau et mapper des pilotes via une chaîne ROP à travers une primitive wrmsr dans un pilote vulnérable AmdTools64.sys. Fonctionnement 1. Charge AmdTools64.sys via NtLoadDriver bascule vers PnP devnode + interface de périphérique basée sur GUID si le...

CVE-2024-33113

CVE-2024-33113 الموجّه D-LINK DIR-845L عرضة لكشف المعلومات عبر الملف bscsmsinbox.php. CVE-2024-33113 هي ثغرة أمنية في الموجّه D-LINK DIR-845L تسمح بكشف المعلومات من خلال الملف bscsmsinbox.php. تنشأ الثغرة من معالجة غير ملائمة للدالة include، والتي يمكن استغلالها عبر التلاعب بالمتغير $file. وهذا...

CVE-2025-7340

🚨 HT Contact Form Widget = 2.2.1 - رفع ملفات تعسفي بدون مصادقة CVE-2025-7340 CVE: CVE-2025-7340 CVSS: 9.8 حرِج 📝 الوصف إضافة HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. في ووردبريس عرضة لرفع ملفات تعسفي بسبب غياب التحقق من نوع الملف في دالة tempfileupload ...

CVE-2024-7627-PoC

CVE-2024-7627-PoC الخلفية هذا النص البرمجي هو إثبات مفهوم PoC لثغرة في ملحق Bit File Manager لووردبريس، الإصدارات 6.0 إلى 6.5.5، والتي تتيح تنفيذ التعليمات البرمجية عن بُعد دون مصادقة عبر استغلال سباق التوقيت Race Condition CVE-2024-7627. معلومات الوصف: ملحق Bit File Manager لووردبريس عرضة لتنفيذ...

DrayTek-Exploit

CVE-2022-23093 تجاوز سعة المخزن المؤقت المستند إلى المكدس في FreeBSD معلومات ⚠️ شيل كود المستخدم افتراضيًا هو FreeBSD/x86-64 - execve - 28 bytes from Gitsnik غيّره وضع الكود الخاص بك للبدء ⚠️ تفاصيل الثغرة أداة ping، المستخدمة لطلب ICMP ECHORESPONSE من مضيف أو بوابة، تُستدعى بهدف IPv4، سواء كان...

CallStranger

CallStranger هذا السكريبت أنشأه Yunus Çadırcı https://twitter.com/yunuscadirci للتحقق من ثغرة CallStranger CVE-2020-12695. يمكن للمهاجم استخدام هذه الثغرة من أجل: تجاوز DLP لتسريب البيانات استخدام ملايين أجهزة UPnP المواجهة للإنترنت كمصدر لهجمات TCP DDoS / SYN Flood الانعكاسية المضخّمة فحص المناف...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Fixed the uninit-value access to imap allocated in the diMount function. The syzbot reports that hexdumptobuffer uses uninit-value: ===================================================== BUG: KMSAN: uninit-value in...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: usb: gadget: ffs: The function ffsdataclear is called twice. This call occurs when ffsfskillsb and ffsep0release are executed. As a result, the function ffsdataclear is called twice when the userland process closes ep0 and...

Astra Linux – Vulnerability in OpenVSwitch

It has been discovered that openvswitch 2.17.8 contains a memory leak due to the xmalloc function in openvswitch-2.17.8/lib/util.c...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source project that provides a graphical login to remote machines using the Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contains a “Out of Bound Read” issue in the xrdpmmtransprocessdrdynvcchannelclose function. There are no known solutions to this problem. Users are advis...

Astra Linux – Vulnerability in DjVuLibre

A flaw was discovered in djvulibre-3.5.28 and earlier. A heap buffer overflow occurs in the function DJVU::GBitmap::decode, due to a malicious djvu file, which may lead to the application crashing and other related issues...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: mmc: uniphier-sd: A resource leak has been fixed in the remove function. A call to tmiommchostfree is missing from the remove function, in order to balance a call to tmiommchostalloc in the probe. This is done in the error handli...

Astra Linux – Vulnerability in Vim

Vim is an open-source, command-line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allowed arbitrary OS commands to be executed when a user opened a crafted file. The complete, guitabtooltip, and printheader options lacked the PMLE flag, enabling a modeline to be execute...

Astra Linux – Vulnerability in dcmtk

There is an improper array index validation vulnerability in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to exploit this vulnerability...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel before version 5.16.3, the driver/bluetooth/hciqca.c file misinterprets the return value of devmgpiodgetindexoptional. It expects the return value to be NULL in the error case, but in reality, it is an error pointer...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed a potential index out of bounds issue in the color transformation function. The issue could occur when the index ‘i’ exceeds the number of transfer function points TRANSFERFUNCPOINTS. The fix includes a...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ice: Check the VF VSI Pointer Value in icevcaddfdirfltr. As mentioned in the commit baeb705fd6a7 “ice: Always check the VF VSI Pointer Values”, we need to perform a null pointer check on the return value of icegetvfvsi before usi...

Astra Linux – Vulnerability in espeak-ng

It was discovered that Espeak-ng 1.52-dev contains a Stack Buffer Overflow issue due to the function RemoveEnding in the dictionary.c file...

Astra Linux – Vulnerability in w3m

There is a out-of-bounds write in the checkType field located in etc.c in w3m 0.5.3. This issue can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause a Denial of Service attack, or potentially have unspecified other impacts...