2201 matches found
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 تبدو CVE-2019-2107 مخيفة. ما زلنا نتذكر أخطاء Stagefright وثغرات PNG .... مع CVE-2019-2107، تعمل وحدة فك الترميز/الترميز decoder/codec تحت مستخدم mediacodec، ومع فيديو "مُصمَّم" بعناية مع تفعيل البلاطات - pspps-i1tilesenabledflag قد تتمكن من تنفيذ تعليمات برمجية عن بُع...
CVE-2025-32462-POC
CVE-2025-32462 – Élévation de privilèges via sudo -h PoC 🚨 Exploit d'élévation locale de privilèges pour sudo via l'argument -h/--host Affecte les systèmes avec des configurations erronées de sudo permettant un accès root non intentionnel. 🧠 À propos Ce PoC illustre CVE-2025-32462 , un défaut...
AV-Chaos-Monkey
قرد الفوضى AV AV Chaos Monkey منصة هندسة فوضى موزعة لاختبار تحميل أنظمة مؤتمرات الفيديو. تحاكي أكثر من 1500 مشارك WebRTC مع بث H.264/Opus وتحقن فوضى شبكية لاختبار مرونة النظام في ظل الظروف المتدهورة العمارة 1. خط أنابيب معالجة الوسائط : يقوم FFmpeg بتحويل الفيديو المدخل إلى H.264 Annex-B و Ogg/Op...
CVE-2024-55040-Sensaphone-XSS
الإفصاح عن ثغرات SENSAPHONE ملخص في منتصف سبتمبر 2024، حددتُ العديد من المشكلات الأمنية ذات الخطورة المتوسطة إلى المنخفضة في Sensaphone Web600 Monitoring System، بما في ذلك ثغرات البرمجة النصية عبر المواقع المخزنة XSS في خيارات الإعداد Setup والملف الشخصي Profile والمناطق Zone في النظام. يمكن...
AndroidAuto
أندرويد أوتو مفتوح المصدر تطبيق مفتوح المصدر لجانب الهاتف في نظام Android Auto. يعمل هذا التطبيق على هاتفك ويُعرض على وحدة الرأس في السيارة عبر USB، ليحل محل تطبيق Google الخاص com.google.android.projection.gearhead. ⚠️ العمل قيد التقدم هذا المشروع في مراحل التطوير المبكرة. عملية المصافحة...
Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting
Parallels H-Sphere 3.0.0 P9 and 3.1 P1 contains multiple cross-site scripting vulnerabilities in login.php in webshell4. An attacker can inject arbitrary web script or HTML via the err, errorcode, and login parameters, thus allowing theft of cookie-based authentication credentials and launch of...
CVE-2025-14893
CVE-2025-14893: IndieWeb WordPress 플러그인의 인증된 저장형 크로스 사이트 스크립팅 XSS 면책 조항: 이 저장소는 교육 목적 및 윤리적 공개 를 위해 생성되었습니다. 취약점은 공급업체에 책임 있게 보고되었으며 패치가 적용되었습니다. 이 정보를 승인 없이 시스템을 악용하는 데 사용하지 마십시오. 개요 IndieWeb WordPress 플러그인버전 = 4.0.5에서 저장형 크로스 사이트 스크립팅Stored XSS 취약점이 발견되었습니다. 이 취약점은 작가Author 이상의 권한을 가진 인증된 공격자가...
CVE-2025-32462-
CVE-2025-32462 – تجاوز اسم المضيف في Sudo لتصعيد الامتيازات فهرس المحتويات 1. نظرة عامة 2. تفاصيل الثغرة 3. الأثر 4. بيئة المختبر 5. التحقق من الإصدار المتأثر 6. تكوين المستخدم وسياسات sudoers 7. شرح الاستغلال خطوة بخطوة 8. ملخص إثبات المفهوم 9. لماذا نظام Ubuntu غير عرضة للثغرة 10. التخفيف 11...
gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...
h-encore
h-encore h-encore , dove h sta per hack e homebrew, è il secondo jailbreak pubblico per PS Vita™ che supporta i firmware più recenti 3.65, 3.67 e 3.68. Ti consente di effettuare modifiche a livello di kernel e utente, cambiare la velocità di clock, installare plugin, eseguire homebrew e molto...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104762)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104762 advisory. H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the...
CVE-2026-55191
A flaw was found in FreeRDP. FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend are vulnerable to a heap-buffer-overflow. A malicious Remote Desktop Protocol RDP server can supply crafted surface dimensions, causing an undersized buffer to be allocated. This can lead to a...
Astra Linux – Vulnerability in DjVuLibre
In DjVuLibre 3.5.27, the sorting functionality also known as GArrayTemplate::sort allows attackers to cause a denial-of-service attack, resulting in an application crash due to uncontrolled recursion. This can occur when a PBM image file is mishandled in the libdjvu/GContainer.h header file...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: xfs: Fixed the allocation of the log recovery buffer for the legacy hsize parameter. The commit a70f9fe52daa “xfs: detects and handles invalid iclog size settings provided by mkfs“” added a fix for incorrect hsize values used ...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ext4: Avoid cycles in the h-tree A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. This can easily lead to the kernel corrupting tree nodes that have already been verified during...
ROS-20260824-73-0009
The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause service failures and expose sensitive information...
SUSE CVE-2026-76927
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP allows a hacker to cause a service failure and expose protected information.
The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause service failures and expose sensitive information...
CVE-2026-55192
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can provide a specially crafted H.264 video stream that causes the client's H.264 decoder to read beyond its allocated memory. This out-of-bounds read can lead to the disclosure of sensitive client memory or cause the...
