Alfred

قيد التطوير - ألفريد المُجدَّد 2.0 ألفريد - إطار عمل نمطي للاستطلاع والاستغلال EXPIREMTNAL PHASE ألفريد هو إطار عمل مبني على لغة Python مصمم للمساعدة في مهام الاستطلاع والاستغلال وما بعد الاستغلال المختلفة. يتميز بطابع نمطي عالٍ، مما يسمح للمستخدمين بإضافة إضافات plugins بسهولة لتوسيع الوظائف. يد...

CVE-2024-23113

CVE-2024-23113 Le script est conçu pour détecter CVE-2024-23113, qui est une vulnérabilité de chaîne de format dans le service FGFM de FortiGate protocole FortiGate vers FortiManager fonctionnant sur le port TCP 541. La vulnérabilité se produit car un attaquant peut contrôler une chaîne de format...

ActiveScanPlusPlus

ActiveScan++ ActiveScan++ étend les capacités de scan actif et passif de Burp Suite. Conçu pour ajouter une charge réseau minimale, il identifie les comportements applicatifs susceptibles d'intéresser les testeurs avancés : Attaques potentielles sur l'en-tête Host empoisonnement de réinitialisati...

CVE-2026-105315

A flaw was found in django-haystack. This flaw allows a remote attacker to achieve arbitrary code execution on the hosting server by supplying crafted data to the search index. Due to improper input handling, the Elasticsearch backend unsafely evaluates raw search result values as executable code...

NextJS-CVE-2025-29927

Voici un fichier README.md propre et informatif pour votre dépôt GitHub qui explique qu'il s'agit d'une application Next.js vulnérable pour CVE-2025-29927 et inclut un lien vers votre vidéo YouTube de configuration : 🔓 NextJS-CVE-2025-29927 - Application de démonstration vulnérable Il s'agit d'un...

-CVE-2024-45352

🚨 CVE-2024-45352 – Xiaomi Smarthome Exécution de code à distance RCE 📌 Résumé Une vulnérabilité critique CVE-2024-45352 a été découverte dans l'application Xiaomi Smarthome, permettant une exécution de code à distance RCE non authentifiée via un traitement incorrect des entrées dans l'analyseur...

thrift: thrift: Denial of Service via improper message handling in language bindings

A flaw was found in Apache Thrift. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending specially crafted requests to applications utilizing affected language bindings. Flawed input parameter processing and resource allocation can trigger...

Astra Linux – Vulnerability in libmysofa

Incorrect handling of input data in the mysofaresamplerresetmem function in the libmysofa library between versions 0.5 and 1.1 may lead to heap buffer overflow and overwriting of a large memory block...

CVE-2026-89538

A flaw was found in the Linux kernel's Server Unix Remote Procedure Call SUNRPC component. A remote attacker, with a valid Generic Security Service GSS context, could send a specially crafted Kerberos v2 wrap token with an oversized "extra count" ec field. This improper handling of malformed toke...

PYSEC-2026-3971 PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a call to readuntilwhitespace with an input which does not have whitespace for a long time. PatchesThis has been fixed in pypdf==6.15.0. WorkaroundsIf you cannot upgrade yet, consider applyin...

CVE-2026-87542

A flaw was found in chromium-browser. This vulnerability, a 'use after free' error in the input handling, allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, an attacker could bypass security measures and run malicious code within the...

CVE-2026-78550 Improper Input Handling in Okta Access Gateway Management Console Exception Handler

The Okta Access Gateway management console passes user-supplied input to eval without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console...

CVE-2026-78550

The Okta Access Gateway management console is vulnerable to code execution due to improper neutralization of directives in dynamically evaluated code. During an authenticated administrator SSH session , the console passes user-supplied input to the eval() function without sufficient sanitization....

USN-8735-1: HSQLDB vulnerability

It was discovered that HSQLDB incorrectly handled specially crafted database files. An attacker could possibly use this issue to overwrite arbitrary files...

CVE-2026-85303

CVE-2026-85303 affects the Booking and Rental Manager WordPress plugin by Magepeople inc. , with a Stored XSS vulnerability present in versions from unspecified through 2.7.7 . The flaw stems from improper neutralization of input during web page generation, allowing an attacker with low privilege...

CVE-2025-15489 Passster < 4.2.24 - Password Protection Bypass

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

USN-8713-1 biosig vulnerabilities

Mark Bereza and Lilith Wyatt discovered that BioSig incorrectly handled certain crafted input files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-22891, CVE-2026-20777...

USN-8713-1: BioSig vulnerabilities

Mark Bereza and Lilith Wyatt discovered that BioSig incorrectly handled certain crafted input files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-22891, CVE-2026-20777...

CVE-2026-84357

An improper input validation flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523208474 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produc...