shellshock

shellshock البرامج النصية المرتبطة بثغرة تحليل وظائف الغلاف بورن bourne shell EVN CVE-2014-6271 dhcpmon.py - يقوم هذا البرنامج النصي بمراقبة إطارات DHCP بحثًا عن أحرف قد تكون ضارة داخل حقول الاستجابة BOOTP و DHCP...

CVE-2025-29824

CVE-2025-29824 win1021h2190445608x64 win1123h2226315126x64 testclient برنامج اختبار monitorclfssys برنامج تشغيل يراقب جميع طلبات IRP الخاصة بـ CLFS poc Crash POC لشاشة الموت الزرقاء LPE win10poc win11poc معلومات التجميع الأساسية إصدار Windows SDK: 10.0 أحدث إصدار مثبت مجموعة أدوات النظام الأساسي:...

cacti

Cacti Overview Cacti is an open-source network monitoring and graphing platform built on RRDtool. It provides a scalable framework to collect, store, and visualize time-series data from network devices, servers, and applications. Core capabilities include: Automated device discovery Local and...

CVE-2021-43798

CVE-2021-43798 إصدارات Grafana من 8.0.0-beta1 إلى 8.3.0 باستثناء الإصدارات المصلحة معرضة لاجتياز الدليل، مما يسمح بالوصول إلى الملفات المحلية. Grafana هي منصة مفتوحة المصدر للمراقبة والرصد. إصدارات Grafana من 8.0.0-beta1 إلى 8.3.0 باستثناء الإصدارات المصلحة معرضة لاجتياز الدليل، مما يسمح بالوصول...

CVE-2020-29667

CVE-2020-29667 انتهاء صلاحية الجلسة غير كافٍ | قيمة كعكة محددة مسبقًا الوصف المقترح في نظام Lan ATMService M3 ATM Monitoring System الإصدار 6.1.0، يمكن لمهاجم عن بُعد يستطيع استخدام قيمة كعكة افتراضية، مثل PHPSESSID=LANIT-IMANAGER، تحقيق السيطرة على النظام والتحكم في الحالة الحالية لأجهزة الصراف...

[SECURITY] Fedora 45 Update: tiptop-2.3.2-8.fc45

Hardware performance monitoring counters have recently received a lot of attention. They have been used by diverse communities to understand and improve the quality of computing systems: For example, architects use them to extract application characteristics and propose new hardware mechanisms;...

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

Security Bulletin: Due to IBM Tivoli Monitoring, IBM Cloud Pak System is affected by multiple vulnerabilities.

Summary Multiple vulnerabilities were found in IBM Tivoli Monitoring shipped with IBM Cloud Pak System. Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-29167 DESCRIPTION: Use After Free vulnerability in Apache HTTP Server with...

CVE-2026-104055: Insertion of Sensitive Information into Log File

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

BIT-RABBITMQ-2026-67233 RabbitMQ: Monitoring-tag user can DELETE shovels

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's isauthorized/2 delegates to rabbitmgmtutil:isauthorizedmonitor/2, which accepts the monitoring tag. But allowedmethods includes DELETE, and deleteresource/2...

BIT-RABBITMQ-2026-66075 RabbitMQ: Monitoring-tag user can restart federation links

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, isauthorized/2 for the /federation-links/.../restart route uses isauthorizedmonitor accepts the monitoring tag, while allowedmethods permits DELETE and deleteresource/2 triggers...

PT-2026-105160

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, is authorized/2 for the /federation-links/.../restart route uses is authorized monitor accepts the monitoring tag, while allowed methods permits DELETE and delete resource/2 triggers rabbit...

PT-2026-105181

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's is authorized/2 delegates to rabbit mgmt util:is authorized monitor/2, which accepts the monitoring tag. But allowed methods includes DELETE, and delete...

PT-2026-105154

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, is authorized/2 uses is authorized monitor for all methods. DELETE resets rabbit core metrics:reset auth attempt metrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbit mgmt w...

CVE-2026-103432

A flaw was found in apcupsd. A remote attacker could exploit a stack-based buffer overflow vulnerability in the web monitoring interface by supplying specially crafted data during variable parsing. A successful attack could allow the attacker to execute arbitrary code on the system or cause a...

CVE-2026-102136 Kiteworks Core Command Execution through Configuration Injection

In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a value through an internal cluster interface that was written into monitoring configuration on another node without sufficient validation, potentially allowing OS commands to be...

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management RMM software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. "Once executed, the legitimate MSP360 installe...

CVE-2026-79625

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

EUVD-2026-89729

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

CVE-2026-79625

The CODESYS Control Runtime is vulnerable to an improper synchronization flaw within its monitoring functionality. When multiple clients submit concurrent requests, the system fails to properly synchronize access, potentially resulting in incorrect reads or writes or the corruption of internal me...