933619 matches found
CVE-2026-105696 Penpot: Share-link page-scope escalation: a share-link holder reads pages outside the link's authorized scope via the get-page RPC command
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but does not verify that the caller-selected page-id belongs to the link's authorized pages set. An attacker with both a valid share link and...
CVE-2026-105696 Penpot: Share-link page-scope escalation: a share-link holder reads pages outside the link's authorized scope via the get-page RPC command
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but does not verify that the caller-selected page-id belongs to the link's authorized pages set. An attacker with both a valid share link and...
CVE-2026-105696 Penpot: Share-link page-scope escalation: a share-link holder reads pages outside the link's authorized scope via the get-page RPC command
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but does not verify that the caller-selected page-id belongs to the link's authorized pages set. An attacker with both a valid share link and...
Jackalope
Jackalope Copyright 2020 Google LLC Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at https://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in...
PwnedCheck
PwnedCheck PwnedCheck एक कमांड-लाइन टूल है जोHave I Been Pwned API का उपयोग करके यह जाँचने के लिए है कि क्या पासवर्ड ज्ञात डेटा उल्लंघनों में दिखाई दिए हैं, और यह एन्क्रिप्टेड Bitwarden वॉल्ट निर्यात को सपोर्ट करता है। विशेषताएँ कमांड लाइन से एकल पासवर्ड की जाँच करें फ़ाइल से पासवर्ड प्रोसेस करें...
CVE-2026-48908-Joomla-SP-Page-Builder-RCE
🛡️ تحليل CVE-2026-48908 رفع ملفات تعسفي بدون مصادقة إلى تنفيذ كود عن بُعد RCE في JoomShaper SP Page Builder -critical?style=for-the-badge&logo=alert -black?style=for-the-badge&logo=github تحليل تقني شامل لثغرة تنفيذ كود عن بُعد بدون مصادقة. 📌 الملخص التنفيذي CVE-2026-48908 هي ثغرة أمنية حرجة تم...
cve-2019-2215-markw
Bad Binder لـ markw !CAUTION كل ما تفعله يكون على مسؤوليتك الخاصة. لست مسؤولًا عن تلف جهازك. تم تكييفه باستخدام Deepseek V4 Flash صُنع لأحدث إصدار عالمي من MIUI 10. نظرة عامة الهدف الرئيسي: الحصول على جذر مؤقت على أحدث miui رسمي يمكن استخدام صلاحيات الجذر لوميض aboot مخصص وهو ما فعلته لفتح القفل...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
EUVD-2026-92709
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105691
The open-source design platform Penpot contains an OS Command Injection vulnerability in its SVG exporter affecting versions prior to 2.18.0 . The root cause is the unsafely handling of an attacker-controlled fill-color value from a text object, which is placed into a ppmcolormask command string ...
CVE-2026-105691
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE
Tugtainer v1.30.2 RCE RCE दो कमजोरियों का दुरुपयोग करके प्राप्त किया जाता है CVE-2026-55494 CVE-2026-62308 संक्षेप में, एक SSRF कमजोरी का दुरुपयोग करके आंतरिक नेटवर्क में एक अप्रमाणित सेवा को कॉल किया जाता है ताकि एक डॉकर बनाया जा सके जो tugtainer के साथ समान pid साझा करता है, इस प्रकार...
CVE-2026-56121-Feast-Unauth-RCE
CVE-2026-56121 — Feast अनधिकृत RCE gRPC रजिस्ट्री डिसीरियलाइज़ेशन के माध्यम से Feast 0.63.0 रजिस्ट्री gRPC सर्वर dill.loads एक OnDemandFeatureView के उपयोगकर्ता-परिभाषित फंक्शन को जैसे ही कोई स्पेक आता है — किसी भी प्राधिकरण जांच से पहले लोड करता है। शिप किया गया कॉन्फ़िग auth: noauth है, इसलिए क...
Exploit for Injection in Dlink Dir-868L_B1_Firmware
CVE-2025-14659: D-Link DHCP Hostname Command Injection An Off...
agent
وكيل Bomfather Bomfather Agent هو وكيل يعتمد على eBPF يعمل في مساحة النواة لحظر الإجراءات بناءً على سياسة محددة. لقد بنينا هذا الوكيل لحل المشكلات التي واجهناها مع الحلول الموجودة. 1. كانت معقدة للغاية في الإعداد والاستخدام. 2. كانت بطيئة وغير فعالة. 3. وحتى لو كانت بسيطة في الإعداد، لم تكن آمنة...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...