391220 matches found
SUSE SLED15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:3658-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3658-1 advisory. Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-74 bsc1274867 - CVE-2026-74934: Site...
MiracleLinux 9 : fence-agents-4.10.0-110.el9_8.6 (AXSA:2026-1614:16)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1614:16 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the...
PT-2026-79547
Netty io.netty:netty-codec-socks versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 Socks4ClientEncoder and SOCKS5 Socks5ClientEncoder client encoders, which fail to validate domain address and...
ContextMenuHijack
ContextMenuHijack الفكرة الأصلية التي ألهمتني هي من @NinjaParanoid : ContextMenuHijack هي تقنية استمرارية بسيطة تستخدم اختطاف COM بناءً على سلوك المستخدم، فعند النقر بزر الماوس الأيمن على ملف/مجلد في مستكشف الملفات لفتح قائمة السياق، يتم تنفيذ الـ beacon الذي حددناه في الوقت نفسه. root@kitploit:...
wordlist.rb
Wordlist المصدر المشكلات التوثيق الوصف Wordlist هي مكتبة Ruby وواجهة سطر أوامر CLI لقراءة قوائم الكلمات ودمجها وتحويرها وبناؤها بكفاءة. الميزات تدعم قراءة قوائم الكلمات بصيغة .txt، وقوائم الكلمات المضغوطة بصيغ .gz و.bz2 و.xz و.zip و.7z. تدعم بناء قوائم الكلمات من أي نص. كما تدعم الضغط بصيغ .gz...
intentshield v1.3.0
IntentShield Don't filter what your AI says. Filter what it's about to do Pre-execution intent verification for AI agents. Why This Exists AI agents have tool access. They can execute shell commands, write files, browse URLs, send emails, and call APIs. Every one of those actions is a potential...
CVE-2022-36804-Bitbucket-RCE-Analysis
CVE-2022-36804: تنفيذ الأوامر عن بُعد في Bitbucket RCE تحليل تقني واستغلال مخبري لحقن وسائط البايت الفارغ Null-Byte Argument Injection ملخص الثغرة الأمنية CVE-2022-36804 هي ثغرة حقن وسائط Argument Injection بدرجة خطورة عالية/حرجة ضمن REST API الخاصة بخوادم Atlassian Bitbucket Server وData Center...
packer-tutorial
جدول المحتويات 1. ما هو المُعبئ؟ : مقدمة إلى الغرض من المُعبئات ودليل عبر ما هي ضروريات تطوير المُعبئ. 2. المتطلبات الأساسية : الأدوات اللازمة للعمل مع هذا البرنامج التعليمي. 3. تجربة سريعة : عرض توضيحي لما ستبنيه باستخدام هذا البرنامج التعليمي. 4. رسم مشروع CMake الخاص بنا : درس مصغّر عن CMake ح...
kernel-exploit-factory
kernel-exploit-factory لا يزال قيد التحديث...... تقرير تحليل استغلال ثغرات CVE في نواة Linux وبيئة التصحيح ذات الصلة. لم تعد بحاجة إلى تجميع نواة Linux أو إعداد بيئتك بعد الآن. يهدف هذا المستودع إلى استخراج جميع استغلالات نواة Linux وبيئة التصحيح ذات الصلة. يمكنك استخدام Qemu لتشغيل النواة واختبا...
DEBIAN-CVE-2026-77220
PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...
CVE-2026-77220
PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...
CVE-2026-76904
GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...
CVE-2026-50538
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with...
DEBIAN-CVE-2026-50538
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with...
CVE-2026-50538 libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with...
CVE-2026-50538 libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with...
CVE-2026-50538
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with...
CVE-2026-50538 libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with...
CVE-2026-50538
LibVNCClient (part of the LibVNCServer project) versions 0.9.12 through 0.9.15 contain an out-of-bounds heap write in the Tight decoder . A malicious or man-in-the-middle VNC server can trigger this by sending a single crafted FramebufferUpdate message, writing attacker-controlled data past the e...
EUVD-2026-64167
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with...