CVE-2026-105830

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,...

CVE-2019-9193-Postgresql-RCE

الاستخدام: CVE-2019-9193.py -h -i IP -p PORT -d DATABASE -c COMMAND -t TIMEOUT -U USER -P PASSWORD مثال: python3 CVE-2019-9193.py -i 127.0.0.1 -p 5432 -U postgres -c 'id' مثال 2 : python3 CVE-2019-9193.py -h localhost -p 5432 -U postgres -c 'id' المخرجات: + الاتصال بقاعدة بيانات PostgreSQL على...

USN-8888-2: Linux kernel (Azure) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8888-2 linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

PT-2026-107989

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,...

Linux Distros Unpatched Vulnerability : CVE-2026-98310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory xeshrinkerwalk wal...

IAT-Hook

Hooking - IAT Hooking Le hooking est une technique qui permet à un utilisateur de rediriger le flux d'exécution d'un programme. La plupart du temps, nous utilisons le hooking de fonctions. Nous allons soit remplacer, soit rediriger une fonction vers la nôtre ; c'est très utile et cela a de...

CVE-2023-21716

CVE-2023-21716 POC : CVE-2023-21716 Microsoft Word RTF فساد كومة جدول الخطوط...

CVE-2026-93684

An SQL user using Impala up to and including version 4.5.2 with only SELECT permission can put JavaScript in a table alias and make it run in another user's browser when that user opens the query plan in Impala's Web UI. This is stored XSS CWE-79. Users are recommended to upgrade to version 4.5.3...

CVE-2026-102781

Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider 5.4.6 - modOsTouchSliderHelper::getAjax, wired through Joomla’s core comajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to JFactory::getUser,...

EUVD-2026-94224

An SQL user using Impala up to and including version 4.5.2 with only SELECT permission can put JavaScript in a table alias and make it run in another user's browser when that user opens the query plan in Impala's Web UI. This is stored XSS CWE-79. Users are recommended to upgrade to version 4.5.3...

CVE-2024-8465-PoC

CVE-2024-8465 – إثبات مفهوم حقن SQL معلومات الفريق اسم الفريق: The Misfits أعضاء الفريق: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi نظرة عامة يحتوي هذا المستودع على تطبيق ويب ضعيف تم إنشاؤه كإثبات مفهوم PoC لتوضيح ثغرة حقن SQL مستوحاة من CVE-2024-8465. التطبيق غير آم...

The vulnerability of the Grant Table, which is used by Xen hypervisors, allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Grant Table of the Xen hypervisor is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...

The vulnerability of the Grant Table, which is used by Xen hypervisors, allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Grant Table of the Xen hypervisor is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...

PT-2026-107424

Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider 5.4.6 - modOsTouchSliderHelper::getAjax, wired through Joomla’s core com ajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to JFactory::getUser,...

iovy_root_research

مستوحاة من dosomder/iovyroot https://github.com/dosomder/iovyroot أداة روت مبنية على ثغرة CVE-2015-1805 تدعم 32 و64 بت، وتحصل على عنوان جدول استدعاءات النظام عبر swi. راجع الحصول على syscalltable على Android...

Byepervisor

Byepervisor الملخص استغلال هايبرفايزر PS5 لإصدارات البرامج الثابتة = 2.xx. يحتوي المستودع على ثغرتين وسلسلتي استغلال، وهما مستقلتان عن بعضهما ويمكن استخدام أي منهما. يتم توفير أحد الاستغلالين بشكل أساسي لأغراض الحفظ فقط /oldjumptableexploit، ولا يلزم استخدام سوى سلسلة الاستغلال الأساسية استغلال...

CVE-2026-98310

In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory xeshrinkerwalk walks the SYSTEM and TT LRUs without a runtime PM reference. Shrinking a bo outside system memory invalidates its GPU mappings, which needs...

DEBIAN-CVE-2026-98216

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...

CVE-2026-98216

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...