15393 matches found
CVE-2026-8452-check
تجاوز سعة الكومة في قائمة بادئات SAML في Citrix NetScaler — سكربت كشف حالة التصحيح فحص آمن وغير تدميري لحالة التصحيح لـ CVE-2026-8452 ، وهو تجاوز سعة الكومة قبل المصادقة في مُطبيع توقيع SAML الخاص بـ Citrix NetScaler ADC / NetScaler Gateway CTX696604، CVSS 8.8. تؤدي قائمة PrefixList كبيرة الحجم ف...
vibe-coding-security
أمان Vibe Coding قبل أن تغرد معلنًا إطلاقك، نفّذ هذه الفحوصات الـ69. إنها تطابق الأنماط الدقيقة وراء ثغرة Lovable RLS CVE-2025-48757، أكثر من 170 تطبيقًا، 2025، وتسريب Moltbook 1.5 مليون رمز API، فبراير 2026، واختراق منصة Lovable في أبريل 2026 الكود المصدري + مفاتيح الخدمة لمشاريع مستخدمين آخرين،...
xss2shell-check
xss2shell-check كاشف غير تخريبي وبدون تبعيات لأولية الانعكاس CVE-2026-64638 "XSS2Shell" في ملف WordPress wp-login.php. الخلفية CVE-2026-64638 هو XSS انعكاسي قبل المصادقة في نواة WordPress ، أُعلن عنه من قبل PWN.AI في 2026-08-07 CVSS 8.9, CWE-79 وصُحِّح في 7.0.3 مع ترحيل التصحيح إلى كل فرع مدعوم...
CVE-2026-76070
CVE-2026-76070: تجاوز سعة المخزن المؤقت للمكدس قبل المصادقة عبر كلمة مرور مفكوكة بـ Base64 في login.cgi لجهاز Netis NC63 يؤدي إلى تنفيذ تعليمات برمجية عن بُعد RCE الباحث: Özcan Ersan @ozcanpng حالة الإفصاح CVE: CVE-2026-76070 الجهة المُصنِّعة: Netis Systems Co., Ltd. المنتج: موجه Netis NC63...
DashOverride
DashOverride Описание Это эксплойт RCE без предварительной аутентификации для VMware vRealize Operations Manager vROPS, затрагивающий версии Запуск root...
Exploit for CVE-2026-81578
PaperCut CVE-2026-81578 + CVE-2026-82078 Defense Toolkit A...
CVE-2026-82481
CVE-2026-82481 affects the cohttp HTTP client/server library for OCaml , prior to version 6.3.0 , which allows directory traversal . The CVSS 4.0 base score is 8.7 (HIGH) , with a HIGH confidentiality impact on the vulnerable system, low attack complexity, and no privileges or user interaction re...
CVE-2026-14494
CVE-2026-14494 is a critical (CVSS 9.8) unauthenticated Remote Code Execution vulnerability in the Sigma Forms Pro plugin for WordPress, affecting all versions up to and including 1.4.5 . The flaw resides in the handle_form_submission function, which dynamically grants the unfiltered_upload capab...
EUVD-2026-67944
A pre-authentication stack-based buffer overflow vulnerability exists in the httpgdprdecrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated attacker with access to the router's web management interface c...
Linux Distros Unpatched Vulnerability : CVE-2026-33605
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode...
CVE-2026-75118
A pre-authentication stack-based buffer overflow vulnerability exists in the httpgdprdecrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated attacker with access to the router's web management interface c...
CVE-2026-75118
CVE-2026-75118 is a pre-authentication stack-based buffer overflow in the http_gdpr_decrypt function of the TP-Link TL-MR100 V3.20 router, caused by insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An unauthenticated attacker on an adjacent network can trigger memory...
CVE-2026-75118 http_gdpr_decrypt Pre-Authentication Stack-Based Buffer Overflow
A pre-authentication stack-based buffer overflow vulnerability exists in the httpgdprdecrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated attacker with access to the router's web management interface c...
CVE-2026-75124
PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parsequerystring to process...
CVE-2026-76651
A buffer overflow in the embedded HTTP service of the TP-Link TL-WR841N v14 is triggered when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter allows a remote, unauthenticated attacker from the adjacent network to corrupt memory beyond ...
CVE-2026-76650 Pre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841N
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...
CVE-2026-76650
CVE-2026-76650 is a NULL pointer dereference in the UPnP service of TP-Link TL-WR841N v14 , triggered by a specially crafted SOAP state variable query request . Successful exploitation causes the UPnP process to terminate or become unstable, resulting in a denial-of-service affecting UPnP discove...
CVE-2026-76649
TP-Link TL-WR841N v14 is affected by a pre-authentication NULL pointer dereference in its UPnP service when processing SOAP action requests. A specially crafted SOAP request containing unexpected XML content causes the UPnP daemon to terminate, resulting in a denial-of-service condition that pers...
CVE-2026-76649 Pre-Authentication NULL Pointer Dereference in UPnP SOAP Action Request Processing in TP-Link TL-WR841N
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...