CVE-2026-63020

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility we...

EUVD-2026-70211

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

CVE-2026-20355

CVE-2026-20355 affects the S/MIME decryption functionality of Cisco Secure Email . The root cause is insufficient validation of message integrity , allowing an unauthenticated, remote attacker to use a machine-in-the-middle technique to intercept and modify traffic between email gateways and reco...

CVE-2026-20354 Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

CVE-2026-20354

CVE-2026-20354 affects the S/MIME decryption functionality of Cisco Secure Email . The root cause is insufficient validation of message integrity , allowing an unauthenticated remote attacker to use a man-in-the-middle technique to intercept and modify traffic between email gateways. A successful...

EUVD-2026-70135

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility we...

CVE-2026-63020

CVE-2026-63020 is a CWE-451 (UI Misrepresentation of Critical Information) vulnerability in the BIG-IP Configuration utility web interface. An attacker can trick authenticated users into clicking malicious links, causing a spoofed error message to be reflected in the victim's browser session. Thi...

K000161728: BIG-IP Configuration utility vulnerability CVE-2026-63020

Security Advisory Description A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages. CVE-2026-63020 Impact An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in...

CVE-2026-70481

CVE-2026-70481 Open WebUI، الإصدارات المتأثرة من 0.5.0 إلى 0.10.2، تم إصلاح الثغرة في 0.11.0. الخطورة متوسطة، CVSS 5.4، CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L، CWE-284 وCWE-862. في backend/openwebui/routers/channels.py، تتفرع معالجات تحديث الرسائل وحذفها بناءً على نوع القناة، ويطرح الفرعان...

Log4j_CVE-2021-44228

La vulnérabilité Log4j, également connue sous le nom de « Log4Shell » ou « CVE-2021-44228 », est une faille de sécurité critique dans la bibliothèque Apache Log4j. Log4j est un framework de journalisation basé sur Java, très largement utilisé, qui permet aux développeurs d'envoyer des messages de...

UnjailMe

UnjailMe Une évasion de sandbox basée sur : le proof-of-concept CVE-2018-4087 par Rani Idan Zimperium le proof-of-concept de débordement de securityd par @cheesecakeufo zeroday, aucun CVE connu, merci Abraham ! À propos du PoC ZIMPERIUM Rani a utilisé sbtool de Jonathan Levine pour découvrir quel...

CVE-2025-32433

CVE-2025-32433 ثغرة أمنية حرجة في خادم SSH الخاص بـ Erlang/OTP تسمح بتنفيذ تعليمات برمجية عن بُعد RCE دون مصادقة. يكمن الخلل في آلية معالجة رسائل بروتوكول SSH، مما يمكّن المهاجمين من تنفيذ أوامر عشوائية دون الحاجة إلى بيانات اعتماد للمصادقة. التأثير ثغرة أمنية بالغة الخطورة تتيح للمهاجمين إمكانية...

LibSSH-exploit

LibSSH-exploit CVE-2018-10933 خوادم ssh المعرضة للخطر - libssh قبل الإصدار 0.8.4 يرسل رسالة تفويض المستخدم التي تسمح بتنفيذ الأوامر عن بُعد RCE الاستخدام: ''' Libsshexploit.py '''...

CVE-2021-44228-example

Ceci est un exemple d'exploitation de CVE-2021-44228 Une vulnérabilité RCE de Log4J2 Je ne suis pas responsable de ce code. SVP ne l'utilisez pas à des fins malveillantes CVE-2021-44228 : Cette vulnérabilité vous permet d'exécuter du code arbitraire en journalisant un message malveillant sur la...

CVE-2026-20127

CVE-2026-20127 نظرة عامة استغلال لثغرة تجاوز المصادقة في Cisco Catalyst SD-WAN Controller، وهي CVE-2026-20127. يستهدف هذا الاستغلال معالج vbondprocchallengeackack. يرسل رسالة CHALLENGEACKACK مزوّرة msgtype=10 تحتوي على بايت verifystatus=1 يتحكم فيه المهاجم، مما يجبر الخادم مباشرة على تعيين...

CVE-2018-10933

Recréer et améliorer le scénario de CVE-2018-10933 Explication root@kitploit: Ceci a un but éducatif pour CVE-2018-10933, qui est le contournement de l'authentification libSSH ! Les versions de libssh 0.6 et supérieures présentent une vulnérabilité de contournement de l'authentification dans le...

cve-2023-31346-poc

Fuite mémoire du firmware Le code présent ici vise à démontrer les fuites mémoire dans les en-têtes des messages invités et le message invité de requête CPUID. Prérequis Installer rustup. Installer un noyau Linux avec le support hôte SEV-SNP. J'ai utilisé un noyau avec quelques-uns de mes propres...

Mr.SIP

SIP Security, Attack and Audit Framework Mr.SIP is...

CVE-2026-81807

The Simple Ajax Chat WordPress plugin before 20260827 does not escape chat message content before rendering it, allowing unauthenticated users to inject arbitrary HTML attributes into the page and run scripts in the browser of anyone viewing the chat, including administrators...

EUVD-2026-69859

The Simple Ajax Chat WordPress plugin before 20260827 does not escape chat message content before rendering it, allowing unauthenticated users to inject arbitrary HTML attributes into the page and run scripts in the browser of anyone viewing the chat, including administrators...