etherleak-checker

أداة فحص ثغرة Etherleak يساعد هذا البرنامج النصي المكتوب بلغة Python في اكتشاف ثغرة Etherleak CVE-2003-0001 على المضيف المستهدف من خلال تحليل بيانات الحشو في حزم الشبكة. يستخدم البرنامج النصي Scapy لإرسال أنواع مختلفة من الطلبات ICMP أو ARP أو TCP ويختبر ما إذا كانت الاستجابات تحتوي على أي بيانات...

CVE-2026-86950

🛡️ CVE-2026-86950 — Recherche de sécurité CoreGraphics 🔬 Recherche en sécurité défensive • Analyse de vulnérabilité • Détection 📌 Aperçu CVE-2026-86950 est une vulnérabilité de gravité élevée affectant le composant CoreGraphics d'Apple. La vulnérabilité est classée comme une écriture hors limites...

Oracle WebLogic Server Administration Console - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...

trippy

Trippy combine les fonctionnalités de traceroute et de ping et est conçu pour aider à l'analyse des problèmes de réseau. Démarrage rapide Consultez le guide pour commencer. Installation Trippy fonctionne sous Linux, BSD, macOS et Windows. Il peut être installé à partir de la plupart des...

chanleakcheck

chanleakcheck هذه أداة للتحقق مما إذا كانت عقدة lnd الخاصة بك قد استُهدفت بواسطة CVE-2019-12999، والتي تم الإفصاح عنها بالكامل مؤخرًا. ستتحقق الأداة مما إذا كانت عقدتك قد قبلت قناة غير صالحة، بالإضافة إلى محاولة تحديد المبلغ الإجمالي للعملات المفقودة، إن وجد. لاحظ أن هذه الأداة مخصصة فقط لـ lnd،...

CVE-2026-23744-MCPJam-Exploit

CVE-2026-23744 MCPJam Inspector RCE Exploit ⚠️ إخلاء مسؤولية هذه الأداة مخصصة لاختبارات الأمان المصرح بها والأغراض التعليمية فقط. الاستخدام غير المصرح به غير قانوني. يتحمل المستخدمون كامل المسؤولية عن أفعالهم. 📋 نظرة عامة يحتوي هذا المستودع على إثبات مفهوم لاستغلال الثغرة CVE-2026-23744 ، وهي ثغرة...

CLEANSTART-2026-GG28030 Netty is an asynchronous, event-driven network application framework

Security vulnerability affects the sonarqube package. Netty is an asynchronous, event-driven network application framework...

CLEANSTART-2026-IG66141 Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces

Security vulnerability affects the rundeck package. Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all available network interfaces...

EUVD-2026-92873

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-La-faille-TCP-IP-qui-ouvre-les-portes Une vulnérabilité critique d’exécution de code à distance dans la pile TCP/IP de Windows CVE-2025-26686 laisse une zone sensible de la mémoire déverrouillée, permettant à des attaquants distants de détourner des systèmes. Exploitable sur le...

CVE-2026-105762

Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...

CVE-2026-105746

A flaw was found in Docling. The document processing pipeline fails to honor configurations that disable remote network services when utilizing the KServe V2 optical character recognition OCR model. This failure can result in unintended information disclosure, as page images from processed...

CVE-2026-105743

A flaw was found in docling. A remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability by providing crafted URLs when remote resource fetching is enabled. Incomplete validation allows requests to be resolved again by the network client, enabling techniques such as Domain Name...

ROS-20261006-73-0080

The vulnerability of the mvpp2bmswitchbuffers function in the drivers/net/ethernet/marvell/mvpp2/mvpp2main.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

ROS-20261006-73-0024

The vulnerability of the icesetringparam function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Ethernet network adapter driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this...

PT-2026-106806

Dbit WIFI4 N300 1.0.0 devices allows administrators from the local Wi-Fi network to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,...

CVE-2025-71384

Dbit WIFI4 N300 1.0.0 devices allows administrators from the local Wi-Fi network to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,...

Rocky Linux 10.1 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_1334)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261334 advisory. glibc: Integer overflow in memalign leads to heap corruption CVE-2026-0861 glibc: glibc: Information disclosure via zero-valued network query...

CVE-2025-71383

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...

ROS-20261006-73-0001

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a system failure...