CVE-2023-34732

CVE-2023-34732 إساءة استخدام وظيفة موثقة للاستيلاء على الحساب الوصف يمكن للمهاجم تخمين كلمة مرور أي مستخدم بما في ذلك المسؤولين باستخدام معامل userId في وظيفة تغيير كلمة المرور وتحديث كلمة مرور المستخدم إلى كلمة جديدة يختارها المهاجم. درجة CVSS: 8.8 عالية نوع الهجوم عن بُعد موثوق الإصدارات المتأث...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

PT-2026-107656

Name of the Vulnerable Software and Affected Versions Excelize versions 2.10.1 through 2.11.0 Description An issue exists in the formula evaluation process where the RIGHT function handles text length inconsistently. The software validates the requested length using UTF-16 code-unit counts via th...

PT-2026-107719

The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.6.9. This is due to the process step customer function using is user logged in as the sole gate before merging POSTed customer data into an...

CVE-2024-21513

CVE-2024-21513 إثبات المفهوم لـ CVE-2024-21513 الاستغلال الأصلي موثّق من قبل Snyk Security Research الاستغلال CVE-2024-21513 هو ثغرة أمنية في langchain-experimental حيث يتم تمرير نتائج استعلامات SQL غير الموثّقة إلى دالة eval في بايثون، مما يتيح تنفيذ تعليمات برمجية عن بُعد عبر حقن المدخلات...

CVE-2022-36752

CVE-2022-36752 का विवरण png2webp v1.0.4 में w2p फंक्शन के माध्यम से आउट-ऑफ-बाउंड राइट out-of-bounds write पाया गया। यह कमजोरी एक क्राफ्टेड webp फ़ाइल के माध्यम से शोषणीय है जब फॉर्मेट को वापस png में बदला जाता है। पुनरुत्पादन कमजोरी को पुनरुत्पादित करने के लिए, png2webp का कमजोर संस्करण v1.0.4...

CVE-2022-22963-PoC

CVE-2022-22963 RCE PoC مثال بسيط لإعادة إنتاج تنفيذ التعليمات البرمجية عن بُعد RCE في CVE-2022-22963 عبر org.springframework.cloud:spring-cloud-function-core. الاستغلال تشغيل الخادم mvn spring-boot:run إرسال طلب curl -X POST -H 'spring.cloud.function.routing-expression:...

CVE-2026-104944 Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500

TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP TP-Link Device Protocol daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service and resulting in a denial-of-service condition. Successful exploitation may all...

EUVD-2026-93792

TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP TP-Link Device Protocol daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service and resulting in a denial-of-service condition. Successful exploitation may all...

CVE-2026-104944 Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500

TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP TP-Link Device Protocol daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service and resulting in a denial-of-service condition. Successful exploitation may all...

CVE-2014-6271

CVE-2014-6271 GNU Bash के संस्करण 4.3 तक में "ShellShock" नामक एक कमज़ोरी मौजूद है, जो फंक्शन परिभाषाओं के बाद एनवायरनमेंट वेरिएबल्स के मूल्यों में पीछे के स्ट्रिंग्स को प्रोसेस करने के तरीके के कारण उत्पन्न होती है। यह कमज़ोरी दूरस्थ हमलावरों को कुछ परिस्थितियों में एनवायरनमेंट को तैयार करके मनमान...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 ثغرة تنفيذ الأوامر عن بُعد CVE-2016-5734 الإعداد git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 الاستغلال python3 cve-2016-5734.py -u root --pwd="root" http://localhost:8083 ...

CVE-2020-0674-Exploit

CVE-2020-0674 CVE-2020-0674 पुराने jscript इंजन में एक use-after-free भेद्यता है। इसे Internet Explorer में ट्रिगर किया जा सकता है। यहाँ दिया गया exploit maxpl0it द्वारा लिखा गया है, लेकिन इस भेद्यता की खोज Qihoo 360 ने की थी, जिसका उपयोग वास्तविक दुनिया में हो रहा था। यह exploit केवल calc खोलता...

CVE-2026-70411

Dell Container Storage Modules CSM, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service TenantService. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to...

CVE-2026-63690

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

EUVD-2026-93466

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

CVE-2026-63690

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

CVE-2026-63690

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Missing Authentication for Critical Function vulnerability in the csi-powerflex , csi-powermax , and csi-powerstore components. An unauthenticated attacker with adjacent network access can exploit this flaw to cause...

Vyper: Memory corruption using function calls within tuples / nested calls

Impact When performing a function call inside a tuple or as an argument inside another function call, there is a memory corruption issue that occurs because of an incorrect pointer to the the tip of the stack. Example code: python @internal def fooa: uint256, b: uint256, c: uint256 - uint256,...

GHSA-2R3X-4MRV-MCXF Vyper: Memory corruption using function calls within tuples / nested calls

Impact When performing a function call inside a tuple or as an argument inside another function call, there is a memory corruption issue that occurs because of an incorrect pointer to the the tip of the stack. Example code: python @internal def fooa: uint256, b: uint256, c: uint256 - uint256,...