USN-8866-1: Redis vulnerabilities

It was discovered that Redis did not properly manage memory when handling the TLS pending-data list. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2026-81934 It was discovered that Redis incorrectly handled certain inputs when processing cluster bus packets. A...

EUVD-2026-92932

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Management. The manipulation of the argument...

CVE-2026-105610 chillzhuang SpringBlade Parameter Submit Management ParamController.java improper authorization

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Management. The manipulation of the argument...

CVE-2026-105610 chillzhuang SpringBlade Parameter Submit Management ParamController.java improper authorization

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Management. The manipulation of the argument...

CVE-2026-105610

A vulnerability exists in chillzhuang SpringBlade up to version 5.0.1 within the Parameter Submit Management component. The flaw is located in an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java. Specifically, manipulatin...

CVE-2026-105610 chillzhuang SpringBlade Parameter Submit Management ParamController.java improper authorization

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Management. The manipulation of the argument...

cve-2024-8069-exp-Citrix-Virtual-Apps-XEN

CVE-2024-8068 and CVE-2024-8069 Citrix التطبيقات الافتراضية وسطح المكتب XEN ثغرة تنفيذ كود عن بعد غير مصدقة اطلع على مقالتنا في المدونة للحصول على معلومات تقنية مفصلة. https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 عرض استغلال الثغرة python exploit-citrix-xen.py...

CVE-2025-64512_PoC

CVE-2025-64512 — exploit RCE de pdfminer.six Python 3, stdlib uniquement aucune installation pip. Pour les tests de sécurité autorisés et l'usage en CTF uniquement — vous êtes responsable du respect de la loi et des règles d'engagement de votre mission. | ---|--- CVE| CVE-2025-64512 Affecté|...

CVE-2022-1329

WP Elementor 3.6.0/1/2 - Exécution de code à distance Google Dork: aucun Date: 16 avril 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version Versio...

CVE-2026-8713

CVE-2026-8713 — Exploit Avada Fusion Builder pour WordPress Traversée de chemin sans authentification → Suppression arbitraire de fichier → Réinstallation forcée → RCE Aperçu CVE-2026-8713 est une vulnérabilité critique CVSS 9.1 dans le plugin/thème Avada Fusion Builder pour WordPress. La fonctio...

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-...

CVE-2023-49964

CVE-2023-49964 : Injection de modèles côté serveur FreeMarker dans Alfresco Un problème a été découvert dans Hyland Alfresco Community Edition =7.2.0. En insérant du contenu malveillant dans le fichier folder.get.html.ftl, un attaquant peut mener des attaques SSTI Server-Side Template Injection,...

cve-2026-41042

CVE-2026-41042 : Apache Gravitino 1.2.1 RCE non authentifié Preuve de concept autonome, utilisant uniquement la bibliothèque standard, pour CVE-2026-41042 : exécution de code à distance non authentifiée dans Apache Gravitino avant 1.2.1 via le paramètre de connexion INIT de JDBC H2. Pas d'en-tête...

CVE-2019-9849

CVE-2019-9849: استرداد رسومات التعداد النقطي عن بُعد في "الوضع الخفي" في LibreOffice يوفّر LibreOffice "وضعًا خفيًا" تُسمح فيه فقط للمستندات القادمة من مواقع تُعتبر "موثوقة" باسترداد الموارد البعيدة. هذا الوضع ليس الوضع الافتراضي، ولكن يمكن تفعيله من قبل المستخدمين الذين يرغبون في تعطيل قدرة...

CVE-2026-56290

CVE-2026-56290 - Compagebuilderck Exploitation de masse ⚠️ Avertissement Cet outil est destiné uniquement à des fins éducatives et de tests de sécurité autorisés. L'accès non autorisé à des systèmes informatiques est illégal Utilisez cet outil uniquement sur des systèmes que vous possédez ou pour...

CVE-2019-12409

CVE-2019-12409: ثغرة RCE بسبب تكوين افتراضي سيء في Apache Solr يحتوي إصدارا 8.1.1 و 8.2.0 من Apache Solr على إعداد غير آمن في ملف التكوين الافتراضي solr.in.sh المرفق مع Solr. الإعدادات التي تؤدي إلى هذه الثغرة هي: في "solr.in.sh": ENABLEREMOTEJMXOPTS="true" يقوم بتمكين خدمة JMX في "solr.cmd":...

bassmaster-rce

bassmaster-rce استغلال ثغرة CVE-2014-7205 عن طريق حقن أكواد جافا سكريبت عشوائية مما يؤدي إلى تنفيذ الأوامر عن بُعد. صادفت هذه المقالة للكاتب LuuPhu مكتوبة بالفياتنامية. نظرًا لأنني كتبت بعض الأكواد بلغة NodeJS لكن لم يسبق لي استغلالها، فقلت لماذا لا أجرب اليوم؟ يتضمن PoC بلغة Python نوعين من...

CVE-2026-105573

A business logic error exists in newbee-ltd newbee-mall versions up to 2.7.5 . The vulnerability impacts an unknown function within the Shopping Cart Quantity Handler component, specifically in the file /jshERP-boot/accountHead/updateAccountHeadAndDetail. By manipulating the goodsCount argument, ...

EUVD-2026-92931

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors...

CVE-2026-105573 newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors...