CVE-2026-33267-PoC

CVE-2026-33267 — Apache Traffic Server: رأس @ غير موثوق → انتحال بيانات وصفية داخلية CVSS 10.0 حرِج · CWE-20 · GHSA-jrh6-9hgv-mqm7 الملخص يحجز Apache Traffic Server الرؤوس المسبوقة بـ @ @Ats-Internal, @ICAP-Status, @TCPInfo, ... لاستخدامها كـبيانات وصفية داخلية : فهي تعيش في بنية الرؤوس داخل...

[SECURITY] Fedora 45 Update: localsearch-3.12.0-2.fc45

Tinysparql is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tinysparql...

[SECURITY] Fedora 45 Update: appstream-generator-0.10.1-5.fc45

appstream-generator is a tool to generate distribution metadata from package repositories. It will extract icons, download screenshots, validate and transform the metadata, and return XML or YAML files that can be read by AppStream clients, such as software centers. It will also generate issue...

EUVD-2026-60585

SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers...

ESXiArgs-Recover

ESXiArgs-Recover ESXiArgs-Recover هي أداة تتيح للمؤسسات محاولة استرداد الأجهزة الافتراضية المتأثرة بهجمات برمجية الفدية ESXiArgs. تدرك CISA أن بعض المؤسسات أبلغت عن نجاحها في استرداد الملفات دون دفع فديات. قامت CISA بتجميع هذه الأداة بناءً على موارد متاحة للعموم، بما في ذلك برنامج تعليمي من إعداد...

CVE-2026-82040

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the...

CVE-2026-12392

An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows an unauthenticated attacker to retrieve the RPC secret in plaintext via the vendor data metadata endpoint. If a target machine was deployed with the 'register as rack' option...

EUVD-2026-91792

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the...

CVE-2026-82040 UTMStack < 11.2.16 SSRF via IdentityProviderService

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the...

CVE-2026-82040

UTMStack versions before 11.2.16 are susceptible to a Server-Side Request Forgery (SSRF) vulnerability within the IdentityProviderService.validateMetadataUrl() function. Authenticated attackers can exploit the POST/PUT /api/identity-providers endpoint because the application fails to validate the...

CVE-2026-82040 UTMStack < 11.2.16 SSRF via IdentityProviderService

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the...

Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL

Summary A project member can create a webhook alert channel whose delivery URL points at an internal address, and trigger.dev's control plane will send the alert there with no SSRF protection. The webhook URL is stored as an unvalidated string and is fetched directly from the webapp server, so a...

GHSA-XXV7-2VV3-H682 Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL

Summary A project member can create a webhook alert channel whose delivery URL points at an internal address, and trigger.dev's control plane will send the alert there with no SSRF protection. The webhook URL is stored as an unvalidated string and is fetched directly from the webapp server, so a...

EUVD-2026-91775

An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows an unauthenticated attacker to retrieve the RPC secret in plaintext via the vendor data metadata endpoint. If a target machine was deployed with the 'register as rack' option...

CVE-2026-12392 RPC secret disclosure via vendor data endpoint in Canonical MAAS

An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows an unauthenticated attacker to retrieve the RPC secret in plaintext via the vendor data metadata endpoint. If a target machine was deployed with the 'register as rack' option...

CVE-2026-12392 RPC secret disclosure via vendor data endpoint in Canonical MAAS

An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows an unauthenticated attacker to retrieve the RPC secret in plaintext via the vendor data metadata endpoint. If a target machine was deployed with the 'register as rack' option...

CVE-2026-12392

An information exposure vulnerability exists in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 . An unauthenticated attacker can retrieve the RPC secret in plaintext via the vendor data metadata endpoint . This is specifically possible if a target machine was deployed wi...

CVE-2026-12392 RPC secret disclosure via vendor data endpoint in Canonical MAAS

An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows an unauthenticated attacker to retrieve the RPC secret in plaintext via the vendor data metadata endpoint. If a target machine was deployed with the 'register as rack' option...

CVE-2026-104851

A flaw was found in fsspec. This vulnerability allows a remote attacker to execute arbitrary code by tricking an application into loading a maliciously crafted reference document, such as a Kerchunk metadata file. When the reference filesystem is opened, unrestricted template evaluation executes...

metagoofil

Metagoofil 2.2 Coded by Christian Martorella www.edge-security.com [email protected] ما هذا؟ Metagoofil هي أداة لاستخراج البيانات الوصفية للمستندات العامة pdf,doc,xls,ppt,etc المتاحة في المواقع المستهدفة. يمكن أن تكون هذه المعلومات مفيدة لأنك تستطيع الحصول على أسماء مستخدمين صالحة، وأسماء...