933624 matches found
CVE-2026-90252
A flaw was found in the Bluetooth Management MGMT component of the Linux kernel. When a Host Controller Interface HCI command is cancelled, the associated memory is not properly freed, leading to a memory leak. This issue can also prevent the management socket from being released, potentially...
CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326 Cups: cups: argument injection in mailto notifier via notify-recipient-uri
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326 Cups: cups: argument injection in mailto notifier via notify-recipient-uri
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
EUVD-2026-92637
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326 Cups: cups: argument injection in mailto notifier via notify-recipient-uri
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326
The CUPS service is vulnerable to an argument injection flaw within the mailto notifier. When email notifications are enabled, the CUPS scheduler processes printer subscription requests containing a notify-recipient-uri . Because the mailto notifier fails to sanitize the recipient address before ...
CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2026-75855
العنوان ثغرة اجتياز المسار في أوامر الخادم "create database" / "drop database" تسمح بكتابة وحذف ملفات تعسفية خارج دليل قاعدة البيانات المُهيأ الملخص تستخدم أوامر create database و drop database في نقطة النهاية POST /api/v1/server اسم قاعدة البيانات المقدم من المُتصل لبناء مسار نظام ملفات دون أي...
CVE-2026-33937
CVE-2026-33937 — Injection d'AST dans Handlebars.js conduisant à une exécution de code Les versions 4.0.0 à 4.7.8 de Handlebars.js sont concernées. Score CVSS : 9,8 Critique. Vue d'ensemble CVE-2026-33937 est une vulnérabilité de confusion de types dans Handlebars.js. La fonction Handlebars.compi...
mcpjam-cve-2026-23744-validator
مدقق الأمان المصرح به لـ MCPJam Inspector مدقق إثبات مفهوم محدود لـ CVE-2026-23744 الذي يؤثر على نشرات MCPJam Inspector الضعيفة. هذا المشروع هو أداة تحقق مستقلة وغير تخريبية لـ CVE-2026-23744 الذي تم الكشف عنه سابقًا. إنه ليس الإفصاح الأصلي عن الثغرة أو الاستغلال. هذا المستودع مخصص لمتخصصي الأمن...
CVE-2019-15107
CVE-2019-15107 Webmin 1.890 تنفيذ التعليمات البرمجية عن بُعد بدون مصادقة تم تصميم هذا السكريبت لاستغلال ثغرة تنفيذ الأوامر بدون مصادقة في Webmin 1.890. يتيح لك تنفيذ أوامر عشوائية على خادم Webmin الهدف أو الحصول على شل عكسي. الاستخدام يأخذ الاستغلال 5 وسائط: $ python3 test.py -h usage: test.py -h...
CVE-2020-0796-BOF
هذا هو تجربة رافاييل مع ثغرة SMBGhost LPE. لقد بدأت مع الكود المصدري من إطار Metasploit: cve-2020-0796: SMBv3 Compression Buffer Overflow SMBGhost CVE 2020-0796 https://github.com/rapid7/metasploit-framework/tree/master/external/source/exploits/CVE-2020-0796 BSD Licensed وإليك ما فعلته: 1. قمت...
CVE-2023-20198
CVE-2023-20198 إثبات المفهوم PoC لـ CVE-2023-20198 الوصف تتميز CVE-2023-20198 بتحقق غير صحيح من المسار لتجاوز فلترة Nginx للوصول إلى نقطة النهاية الويب webuiwsmahttp دون الحاجة إلى المصادقة. من خلال تجاوز المصادقة على نقطة النهاية، يمكن للمهاجم تنفيذ أوامر Cisco IOS عشوائية أو إجراء تغييرات في...
wp2shell-lab
wp2shell lab & detector + pre-auth RCE PoC A self-contained lab, non-destructive detector , and full pre-auth RCE proof-of-concept for wp2shell — the pre-authentication vulnerability chain in WordPress core: CVE| Component| Class| CVSS ---|---|---|--- CVE-2026-60137| WPQuery::authornotin| SQL...
CVE-2026-52806
Gogs RCE — git rebase में आर्गुमेंट इंजेक्शन CWE-88 पुल रिक्वेस्ट मर्ज फ्लो में आर्गुमेंट इंजेक्शन के माध्यम से Gogs नामक एक ब्रांच को Git द्वारा --exec फ़्लैग के रूप में पार्स किया जाता है, न कि पोज़ीशनल आर्गुमेंट के रूप में, जिससे रीबेस के दौरान प्रत्येक रीप्ले किए गए कमिट के बाद sh -c चलता है।...
CVE-2025-14847
MongoDB CVE-2025-14847 भेद्यता पता लगाने का उपकरण MongoDB मेमोरी लीक भेद्यता CVE-2025-14847 पता लगाने का उपकरण ⚠️ महत्वपूर्ण सूचना: यह उपकरण केवल अधिकृत सुरक्षा परीक्षण और भेद्यता मूल्यांकन के लिए है। अनधिकृत उपयोग कानून का उल्लंघन हो सकता है। 📋 सूची भेद्यता विवरण विशेषताएँ स्थापना उपयोग विधि...
CVE-2022-0492-Container-Escape
CVE-2022-0492-Container-Escape CVE-2022-0492-Container-Escape Go में कार्यान्वित संदर्भ लिंक: https://github.com/chenaotian/CVE-2022-0492 https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/...