CVE-2026-107159

A flaw was found in miniupnpd. An unauthenticated attacker on the adjacent network can exploit this vulnerability to cause a Denial of Service DoS by crashing the service. By sending a specially crafted Simple Service Discovery Protocol SSDP search request with an invalid delay value, the attacke...

CVE-2025-54068-livewire

CVE-2025-54068 - Livewire v3.6.3 भेद्य प्रयोगशाला यह फ़ोल्डर एक न्यूनतम Laravel + Livewire v3 एप्लिकेशन बनाता है जो Livewire 3.6.3 भेद्य पर पिन किया गया है, जो CVE-2025-54068 को पुनः उत्पन्न करने के लिए है। माउंटेड कंपोनेंट को जानबूझकर सार्वजनिक एक्सप्लॉइट श्रृंखला के साथ संगत बनाया गया है यह...

CVE-2026-105242

A flaw was found in log4net. A remote attacker can exploit this issue by sending a crafted request containing content such as markup that triggers ASP.NET request validation. When log4net attempts to parse the request parameters, an unhandled exception occurs, causing the logging system to discar...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-42580 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently overflow...

CVE-2020-14882

CVE-2020-14882 CVE-2020–14882 - بحث بواسطة Jang الكود بواسطة @s1kr10s Poc: مراجعة المنشور / الفيديو: https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf https://www.youtube.com/watch?v=JFVDOIL0YtA&feature=youtu.be...

CVE-2025-57310

CVE-2025-57310 ثغرة تزوير الطلبات عبر المواقع CSRF في Salmen2/Simple-Faucet-Script الإصدار 1.07 عبر طلب POST مصمم إلى admin.php?p=ads&c=1 تتيح للمهاجمين تنفيذ تعليمات برمجية عشوائية. CWE CWE-352: تزوير الطلبات عبر المواقع CSRF CVSS v3.1 النتيجة الأساسية: 8.8 عالية...

puma_header_normalization-CVE-2024-45614

التحقق من Puma Header normalization CVE-2024-45614 النشرة الأمنية: https://github.com/puma/puma/security/advisories/GHSA-9hf4-67fc-4vf4 commit الإصلاح: https://github.com/puma/puma/commit/cac3fd18cf29ed43719ff5d52d9cfec215f0a043 النتائج نتائج تشغيل request.rb duplicate الهدف| النتيجة ---|---...

K000163580: Elasticsearch vulnerability CVE-2026-56149

Security Advisory Description Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory...

React2Shell_cve-2025-55182

ثغرة تنفيذ الأوامر عن بُعد في React Server Components - CVE-2025-55182 مرحبًا! أتمنى أن يكون يومك رائعًا! 😊✨ ما الموضوع؟ إصدارات React Server Components 19.0.0 و19.1.0 و19.1.1 و19.2.0 تعاني من مشكلة أمنية خطيرة. الحزم المتأثرة هي react-server-dom-parcel وreact-server-dom-turbopack...

CVE-2025-31650

Apache Tomcat 10.1.39 - حجب الخدمة DoS تقوم هذه الأداة بتنفيذ فيضان طلبات HTTP/2 غير متزامن وعالي الحجم باستخدام ترويسات priority تالفة لاختبار استقرار خوادم Apache Tomcat التي تعمل بالإصدار 10.1.10 إلى 10.1.39. ⚠️ هذا مخصص للأغراض التعليمية والبحثية فقط. ❌ المؤلفون ليسوا مسؤولين عن أي استخدام غير...

SPIP BigUp Plugin - Remote Code Execution

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...

Adminer <4.7.9 - Server-Side Request Forgery

Adminer before 4.7.9 is susceptible to server-side request forgery due to exposure of sensitive information in error messages. Users of Adminer versions bundling all drivers, e.g. adminer.php, are affected. An attacker can possibly obtain this information, modify data, and/or execute unauthorized...

Apache Solr <=8.8.1 - Server-Side Request Forgery

Apache Solr versions 8.8.1 and prior contain a server-side request forgery vulnerability. The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on anothe...

VMware vSphere - Server-Side Request Forgery

VMware vSphere HTML5 is susceptible to server-side request forgery due to improper validation of URLs in a vCenter Server plugin. An attacker with network access to port 443 can exploit this issue by sending a POST request to the plugin. This affects VMware vCenter Server 7.x before 7.0 U1c, 6.7...

Qlik Sense Enterprise - HTTP Request Smuggling

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...

NextChat_SSRF_CVE-2023-49785

NextChatSSRFCVE-2023-49785...

CVE-2025-55182-Lab

مختبر CVE-2025-55182 مختبر عملي لاستغلال CVE-2025-55182 React2Shell - تنفيذ الأوامر عن بُعد في مكونات خادم React. ⚠️ إخلاء مسؤولية لأغراض تعليمية فقط. اختبر فقط على الأنظمة التي تملكها. بداية سريعة Clone and start git clone https://github.com/dhananjayakumarn/CVE-2025-55182-Lab.git cd...

CVE-2026-106216

Cross-site request forgery in ReadingList in Google Chrome on on Andro...

CVE-2025-70522

The Fanvil x7a firmware version 2.6.0.1182 is vulnerable to Cross-Site Request Forgery (CSRF) attacks. The issue stems from the request handler failing to enforce cross-origin resource protection for state-changing requests. This allows an attacker to bypass cross-origin boundaries and perform un...

PT-2026-107604

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software for Cisco Nexus 3000 Series Switches affected versions not specified Cisco NX-OS Software for Cisco Nexus 9000 Series Switches affected versions not specified Description An issue exists in the MPLS Operation,...