CVE-2025-13342

إثبات المفهوم لـ CVE-2025-13342 إضافة Frontend Admin من DynamiApps لووردبريس معرضة لتعديل غير مصرح به لخيارات ووردبريس التعسفية في جميع الإصدارات حتى 3.28.20. وهذا يسمح للمهاجمين بتسجيل المستخدمين وتعيين الدور الافتراضي إلى مدير. يصبح الاستغلال غير مصادق عليه إذا كان النموذج الذي تم إنشاؤه عبر...

CMF-Watch-Pro-2-BLE-Protocol

CMF Watch Pro 2 — BLE प्रोटोकॉल रिवर्स-इंजीनियर्ड अनधिकृत। यह दस्तावेज़ CMF Watch Pro 2 CMF by Nothing के ब्लूटूथ लो एनर्जी BLE प्रोटोकॉल का वर्णन करता है, जिसे एक वैकल्पिक साथी ऐप के लिए रिवर्स इंजीनियरिंग द्वारा पुनर्निर्मित किया गया है। यह Nothing/CMF से संबद्ध या समर्थित नहीं है। अपने जोखिम प...

synapse

Synapse |support| |development| |documentation| |license| |pypi| |python| يتم الآن صيانة Synapse بنشاط في element-hq/synapse Synapse هو خادم منازل مفتوح المصدر لـ Matrix تم تطويره من 2019 حتى 2023 كجزء من مؤسسة Matrix.org. مؤسسة Matrix.org غير قادرة على تخصيص موارد لصيانة Synapse ويستمر تطويره...

shodan-dorks

Shodan dorks Description: This GitHub repository provides a range of search queries, known as "dorks," for Shodan, a powerful tool used to search for Internet-connected devices. The dorks are designed to help security researchers discover potential vulnerabilities and configuration issues in...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

ysoserial.net

أداة إثبات مفهوم لتوليد حمولات تستغل إلغاء تسلسل الكائنات غير الآمن في .NET. الوصف ysoserial.net عبارة عن مجموعة من الأدوات وسلاسل الأدوات الموجهة للخصائص "gadget chains" المكتشفة في مكتبات .NET الشائعة والتي يمكنها، في ظل الظروف المناسبة، استغلال تطبيقات .NET التي تقوم بإلغاء تسلسل غير آمن...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

git-vuln-finder

git-vuln-finder git कमिट संदेशों से संभावित सॉफ़्टवेयर कमज़ोरियाँ ढूँढना। आउटपुट प्रारूप JSON है जिसमें संबंधित कमिट शामिल है जिसमें सॉफ़्टवेयर कमज़ोरी के संबंध में एक फिक्स हो सकता है। खोज केवल कमिट संदेशों के विरुद्ध नियमित अभिव्यक्तियों के एक सेट पर आधारित है। यदि CVE IDs मौजूद हैं, तो वे...

PT-2026-81900

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647 B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument ntp server results in command injection. The attack can be initiated remotely. The exploit is now...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.12)

The version of AOS installed on the remote host is prior to 7.5.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1.12 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...

EulerOS Virtualization 2.13.1 : gnutls (EulerOS-SA-2026-3173)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels,...

EulerOS Virtualization 2.13.0 : gnutls (EulerOS-SA-2026-3213)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels,...

PT-2026-81312

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The...

PT-2026-81295

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

EulerOS Virtualization 2.13.1 : libxslt (EulerOS-SA-2026-3184)

According to the versions of the libxslt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT func:result elements during stylesheet parsin...

FreeBSD -- Unauthorized credential switching

Problem Description: In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-59133)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59133 advisory. - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246557 Tenable has extracted the preceding description block directly from the Oracle Lin...

PT-2026-81851

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in soup...

PT-2026-81239

The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files...