EUVD-2026-64001

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909 llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909 llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-69502

Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-54789

modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of...

CVE-2026-54789

mod_auth_openidc (Apache 2.x OpenID Connect Relying Party module) prior to 2.4.19.4 contains an out-of-bounds read and one-byte out-of-bounds write in oidc_state_cookies_parse_token() (src/state.c). The loop scanning for = in a cookie token does not stop at the string terminator, and the cookie !...

EUVD-2026-63999

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a crafted URL to /api/v1/resources, causing the server ...

CVE-2026-69502

CVE-2026-69502 is a server-side request forgery (SSRF) vulnerability in Azure SQL Database that allows an unauthorized, network-based attacker to elevate privileges . The CNA-assigned CVSS 3.1 score is 10.0 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N, indicating no privileges ...

cve-2025-55182-analysis

CVE-2025-55182 — تحليل تنفيذ التعليمات البرمجية عن بُعد في React Server Components تحليل ثغرة أمنية في تطبيق ويب · M2 Cybersecurity · 2025 المؤلف: نيان محمد · LinkedIn سلسلة استغلال متكاملة لثغرة إلغاء تسلسل غير آمنة خطيرة CVSS 10.0 في React Server Components، بدءًا من الاستطلاع وصولًا إلى تنفيذ...

hfs2

مقدمة يمكنك استخدام HFS HTTP File Server لإرسال الملفات واستلامها. إنه يختلف عن مشاركة الملفات التقليدية لأنه يستخدم تقنية الويب. كما يختلف عن خوادم الويب التقليدية لأنه سهل الاستخدام للغاية ويعمل مباشرةً "خارج الصندوق". سيتيح لك نظام الملفات الافتراضي مشاركة حتى ملف واحد بسهولة. الأمان —...

claude-project-scanner

Scanner de Projets Claude Compétence Claude Code en lecture seule qui analyse les projets tiers pour détecter les risques de sécurité connus avant de les ouvrir. Détecte les schémas d'attaque documentés dans : CVE-2025-59536 injection de Lifecycle Hooks de Claude Code CVE-2025-61260 injection...

CVE-2026-48769

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...

cve-reproduction-lab

مختبر إعادة إنتاج الثغرات CVE نظرة عامة هذا المشروع هو مختبر أبحاث في الأمن السيبراني مصمم لإظهار الأثر الواقعي لثغرات البرمجيات من خلال استغلال مُتحكَّم فيه ومحاكاة للتصحيحات الدفاعية. يركز المختبر على CVE-2021-41773، وهي ثغرة حرجة من نوع اجتياز المسار Path Traversal في خادم Apache HTTP تسمح...

CVE-2026-48769

CVE-2026-48769 is a critical (CVSS 9.9) arbitrary file write vulnerability in Incus , a system container and virtual machine manager, affecting versions prior to 7.2.0 . The root cause is that the Incus client trusts a crafted Incus-Image-Hash header returned by a malicious image server, leading ...

EUVD-2026-63983

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...

CVE-2026-48769 Incus has an arbitrary file write on its client due to trusted image hash

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...

prismsec

PrismSec 🔷 خادم MCP معياري وآمن لأدوات اختبار الاختراق. يغلّف 7 أدوات أمنية قياسية في الصناعة nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap في 13 أداة MCP مسجّلة — جاهزة للاستخدام مع Claude وCursor وCopilot وأي وكيل ذكاء اصطناعي متوافق مع MCP. الميزات...

CVE-2021-41773-Apache-Lab

CVE-2021-41773 — Laboratoire Apache HTTP Server 2.4.49 Reproduction de CVE-2021-41773 , une vulnérabilité de traversée de chemin dans Apache HTTP Server 2.4.49. Ce projet utilise Docker pour créer un environnement vulnérable isolé et un PoC Python pour démontrer la divulgation contrôlée de...

CVE-2026-68554

A flaw was found in Coturn, a free open source implementation of TURN and STUN Session Traversal Utilities for NAT Server. An on-path attacker can exploit this vulnerability on plain UDP or TCP by appending attributes after the MESSAGE-INTEGRITY field in an authenticated STUN request. This allows...