vaas

الحكم كخدمة الحكم كخدمة VaaS هي خدمة سحابية توفر إمكانية فحص الملفات بحثاً عن البرامج الضارة والتهديدات الأخرى. تتيح لك دمج اكتشاف البرامج الضارة بسهولة في تطبيقك ببضعة أسطر من التعليمات البرمجية. يمكنك استخدام VaaS لتأمين أي سيناريو يتم فيه تبادل أو تخزين ملف، مثل:...

CVE-2024-40457-PoC

CVE-2024-40457-PoC CVE PoC 2024-40457 -g फ्लैग के साथ सावधान रहें, चित्र जांचें।...

G Auto-Hyperlink <= 1.0.1 - SQL Injection

The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape an 'id' GET parameter before using it in a SQL statement, to select data to be displayed in the admin dashboard, leading to an authenticated SQL injection id: CVE-2021-24627 info: name: G Auto-Hyperlink = 1.0.1 - SQL...

CVE-2025-68001

CVE-2025-68001 WordPress g-FFL Checkout प्लगइन 📡 वक्र से आगे रहें। टेलीग्राम पर @KNxploited से जुड़ें — नवीनतम CVEs, zero-days, और अत्याधुनिक एक्सप्लॉइट रिसर्च का आपका विशेष स्रोत। लगातार अपडेट किया जाता है। सबके लिए नहीं। 📋 अवलोकन...

CVE-2026-56111

CVE-2026-56111 - Marlin M421 Out-of-bounds Write Proof of concept for CVE-2026-56111 , an out-of-bounds write in the M421 G-code handler of Marlin Firmware when built with MESHBEDLEVELING. Advisory: https://www.vulncheck.com/advisories/marlin-firmware-out-of-bounds-write-via-m421-g-code-handler...

CVE-2025-12720

g-FFL Cockpit = 1.7.1 - बिना प्रमाणीकरण के मनमाना उत्पाद विलोपन g-FFL Cockpit प्लगइन queue और process REST API एंडपॉइंट पर उचित प्राधिकरण जांच लागू नहीं करता है, जिससे बिना प्रमाणीकरण वाले उपयोगकर्ता HTTP हेडर को स्पूफ करके IP-आधारित प्रमाणीकरण को बायपास करते हुए मनमाने WooCommerce उत्पादों को हट...

CVE-2025-12721

g-FFL Cockpit = 1.7.1 - अप्रमाणित सूचना प्रकटीकरण g-FFL Cockpit प्लगइन serverstatus REST API एंडपॉइंट पर उचित प्राधिकरण जांच लागू नहीं करता है, जिससे अप्रमाणित उपयोगकर्ता एक उजागर सार्वजनिक एंडपॉइंट के माध्यम से संवेदनशील सर्वर कॉन्फ़िगरेशन जानकारी, PHP सेटिंग्स, डेटाबेस विवरण, WordPress इंस्टॉले...

Logitech-G-Cloud-GhostLock-CVE-2026-43499

محاولة روت لجهاز Logitech G Cloud · GhostLock CVE-2026-43499 Logitech G Cloud — محاولة روت CVE-2026-43499 GhostLock ⚠️ لأغراض البحث والدفاع الأمني فقط جميع محتويات هذا المستودع مولّدة بواسطة DeepSeek AI ، وهي مخصّصة فقط للبحث الأمني وتحليل الثغرات والتقييم الأمني الدفاعي. الحالة سلسلة الاستغلال...

Astra Linux – Vulnerability in ntfs-3g

A properly crafted NTFS image with an unallocated bitmap can lead to an endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

Astra Linux – Vulnerability in ntfs-3g

An invalid return code in fusekernmount allows for intercepting the libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, flyte, guac, pulumi, cortex, chezmoi, flux, opentelemetry-collector, sigstore-scaffolding, timestamp-authority, druid, restic, hugo, argo-workflows, kubescape, spire-server, tekton-chains, zot, fulcio, wal-g, velero, cosign, tempo, airflow,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k8sgateway, guac, kubeflow-katib, envconsul, cni-plugins, kuberlr, nri-nginx, kapp, kubernetes-csi-external-health-monitor, kubernetes-csi-driver-nfs, ko, witness, prometheus, pluto, kubernetes-csi-driver-hostpath, fulcio, neuvector-sigstore-interface, migrate, wal-g...

Malicious code in @years20/n8n-nodes-utils-helper-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ed8dc4c0467877e129dc4b2035e154dc4fec24bfda412d649fa02ed7150133 On npm install, the package's postinstall script duplicated in the main module executes shell commands to collect host identity id, hostname, pwd,...

CVE-2026-18895

A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-18895

CVE-2026-18895 affects UTT HiPER 1250GW builds

CVE-2026-18895

A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-18895 UTT HiPER 1250GW APSecurity_5g strcpy stack-based overflow

A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App

Overview Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc. web server for debugging purposes remains enabled CWE-489 - CVE-2026-66403 Missing serv...

CVE-2026-53551

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF Authentication Server Function does not validate the supiOrSuci field in UE authentication requests. Null bytes \x00 and other control characters pass through JSON parsing unchanged and are forwarded...

EUVD-2026-51628

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF Authentication Server Function does not validate the supiOrSuci field in UE authentication requests. Null bytes \x00 and other control characters pass through JSON parsing unchanged and are forwarded...