cve-lfi-lab

🧠 مختبر CVE: محاكاة محلل SOC من المستوى الأول CVE-2025-39507 | تضمين الملفات المحلي في إضافة Nasa Core لـ WordPress 📝 السيناريو: يوم في مركز العمليات الأمنية SOC إنه يوم اثنين عادي. أنا مسجّل الدخول إلى لوحة تحكم SOC، أراجع التنبيهات كالمعتاد. يصل أحدها ويلفت انتباهي: تنبيه: محاولة محتملة لتضمين...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 هي ثغرة حقن SQL تم تحديدها في نظام MODAPS التابع لـ NASA EOSDIS، ناتجة عن التحقق غير السليم من الإدخال في معامل category. تسمح هذه الثغرة للمهاجمين بالوصول إلى بيانات حساسة، وتنفيذ استعلامات SQL عشوائية من خلال التلاعب بمعامل HTTP GET باستخدام تقنيات مثل حقن SQL القائم على الأخطاء...

EUVD-2026-92130

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164 NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164 NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164

A flaw in NASA cFS versions up to 7.0.1 allows for an out-of-bounds read via the CFE_FS_ParseInputFileNameEx function located in cfe/modules/fs/fsw/src/cfe_fs_api.c. This vulnerability can be triggered through remote exploitation . While a pull request to address the issue exists, the documents i...

CVE-2026-105164 NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164: Out-of-bounds Read

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

PT-2026-104650

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE FS ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe fs api.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits...

CVE-2026-105105

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

EUVD-2026-92014

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105

The NASA-AMMOS AIT-Core (versions through 3.1.1 ) is vulnerable to CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server ). The underlying cause is that the ZeroMQ broker binds its XSUB and XPUB sockets to all network interfaces by d...

CVE-2026-105105: Missing Authentication for Critical Function

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

PT-2026-104572

Name of the Vulnerable Software and Affected Versions NASA-AMMOS AIT-Core versions prior to 3.1.2 Description The ait.core.server telemetry and command broker ait-server lacks authentication for critical functions. By default, the ZeroMQ message bus binds its XSUB and XPUB sockets to all network...

CVE-2026-79954

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand TC receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the...

CVE-2026-79954 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand TC receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the...

CVE-2026-79954 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand TC receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the...