CVE-2024-26169-Detail-1

CVE-2017-11882-metasploit यह एक Metasploit मॉड्यूल है जो नीचे दिए गए POC का उपयोग करके CVE-2017-11882 का शोषण करता है: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. स्थापना 1. cve201711882.rb को /usr/share/metasploit-framework/modules/exploits/windows/local...

CVE-2026-42530

CVE-2026-42530 CVE-2026-42530 के लिए स्कैनर, जो nginx के HTTP/3 मॉड्यूल में use-after-free दोष है। प्रभावित: nginx 1.31.0, 1.31.1 ठीक किया गया: nginx 1.31.2 उपयोग pip install aioquic python3 scannerCVE-2026-42530.py port python3 scannerCVE-2026-42530.py --file hosts.txt यह कैसे काम करता है एक ही...

CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift تجاوز سعة المخزن المؤقت على الكومة Heap حرج في NGINX 📌 نظرة عامة CVE-2026-42945 المعروف أيضًا باسم NGINX Rift هو ثغرة أمنية حرجة في الوحدة النمطية ngxhttprewritemodule الخاصة بـ NGINX. النوع : تجاوز سعة المخزن المؤقت على الكومة Heap-based Buffer Overflow CWE-122 تاري...

CVE-2025-42957-SAP-S-4HANA-Under-Siege

CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – क्या हुआ? अगस्त 2025 में, SAP के प्रमुख ERP प्लेटफ़ॉर्म S/4HANA में एक RFC-सक्षम फ़ंक्शन मॉड्यूल में कमज़ोरी पाई गई। केवल निम्न-विशेषाधिकार low-privileged पहुँच वाले हमलावर उस मॉड्यूल में मनमाना ABAP कोड इंजेक्ट कर सकते हैं, सामान्य प्राधिकरण जाँचों को...

CVE-2022-1329

WP Elementor 3.6.0/1/2 रिमोट कोड निष्पादन Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version Version: 3.6.0,...

nginxrift-CVE-2026-42945

NGINX Rift RCE शोषण CVE-2026-42945 @DepthFirstDisclosures से NGINX Rift भेद्यता, जो ngxhttprewritemodule में एक गंभीर हीप-आधारित बफर अतिप्रवाह है, के अनुसंधान और पहचान के लिए एक पेशेवर प्रूफ-ऑफ-कॉन्सेप्ट PoC उपकरण। भेद्यता अवलोकन CVE आईडी: CVE-2026-42945 उपनाम: NGINX Rift गंभीरता: गंभीर CVSS 9.2...

CLEANSTART-2026-SF92168 Downloading and building modules with malicious version strings can cause local code execution

Security vulnerability affects the go1.27 package. Downloading and building modules with malicious version strings can cause local code execution...

[SECURITY] Fedora 45 Update: ocaml-easy-format-1.3.4-21.fc45

This module offers a high-level and functional interface to the Format module of the OCaml standard library. It is a pretty-printing facility, i.e. it takes as input some code represented as a tree and formats this code into the most visually satisfying result, breaking and indenting lines of cod...

[SECURITY] Fedora 45 Update: ocaml-astring-0.8.5-38.fc45

Astring exposes an alternative String module for OCaml. This module tries to balance minimality and expressiveness for basic, index-free, string processing and provides types and functions for substrings, string sets and string maps. Remaining compatible with the OCaml String module is a non-goal...

PT-2026-107269

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.4.20 Description The @backstage/plugin-auth-backend-module-oidc-provider package contains improper authentication within the OIDC provider. In deployments utilizing OIDC email-based identity resolution with a...

PT-2026-107248

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-sentry versions 0.3.0 through 0.3.7 Description Improper input validation in sentry scaffolder actions allows an authenticated internal user to force the backend to contact unintended destinations...

PT-2026-107267

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-bitbucket-cloud versions prior to 0.3.10 @backstage/plugin-scaffolder-backend-module-bitbucket-server versions prior to 0.2.25 Description Bitbucket pull-request Scaffolder actions fail to sufficient...

PT-2026-107266

Name of the Vulnerable Software and Affected Versions @backstage/plugin-catalog-backend-module-gitlab versions prior to 0.8.7 Description Improper authorization exists during GitLab organizational user ingestion. Deployments that enable GitLab organization event ingestion and use scoped catalog...

CVE-2026-106488: Improper Authentication

Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentication in the oidc provider. Deployments using OIDC email-based identity resolution with a provider that permits unverifi...

ROS-20261006-73-0048

The vulnerability of the Linux operating system’s kernel security module, AppArmor, is related to coding errors. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

ROS-20261006-73-0078

The vulnerability of the pmruntimereinit function in the drivers/base/power/runtime.c file of the Linux kernel’s device drivers module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

ROS-20261006-73-1003

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

PT-2026-107100

Name of the Vulnerable Software and Affected Versions Hydra versions 1.3.4 through 1.3.6 Hydra versions 1.4.0.dev1 through 1.4.0.dev9 Description Hydra stores legacy instantiate target blocklists and related execution-policy collections in mutable module-level state. An attacker controlling...

ROS-20261006-73-0122

The vulnerability of the atmelsha204arngreadnonblocking function in the drivers/crypto/atmel-sha204a.c driver of the Linux kernel’s cryptographic accelerator module is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Unprivileged Local Execution of Kernel-Level Diagnostic Tests within Brocade Fabric OS

: An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...