CVE-2026-21994

CVE-2026-21994 الملخص يحتوي إصدار Oracle OKIT oci-designer-toolkit 0.3.0 على خطأين حرجين في التكوين يترابطان معًا لتمكين استيلاء كامل غير مصادق عليه. إن SECRETKEY الخاص بـ Flask والمُرمّز بشكل ثابت والمكشوف في المستودع العام يسمح لأي مهاجم بتزوير ملف تعريف ارتباط جلسة إدارية صالح — دون الحاجة إلى...

kirki-wordpress-account-security-assessment

CVE-2026-8206 - الاستيلاء على الحسابات دون مصادقة في إضافة Kirki لنظام WordPress تقرير الأمن السيبراني بأسلوب استشاري تقرير احترافي لتقييم الثغرات حول مخاطر أمان حسابات إضافة Kirki في WordPress، ويشمل التأثير التقني والمعالجة واستراتيجية التخفيف. 📍 نظرة عامة على التقرير الحقل| التفاصيل ---|--- نو...

Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.

محاكاة-ومنع-هجمات-ثغرة-Zerologon-CVE-2020-1472. محاكاة هجوم ثغرة Zerologon CVE-2020-1472 في Active Directory على Windows Server 2016 واستخدام حل Trend Micro Deep Security لمنع مثل هذه الهجمات. ثغرة Zerologon هي نقطة ضعف في بروتوكول Netlogon يمكن استغلالها دون الحاجة إلى كلمة مرور، مما يسمح...

your-bot-my-inbox-cve-2026-68929-fastgpt-unauthenticated-wechat-channel-hijack

CVE-2026-68929 — FastGPT اختطاف قناة WeChat PoC استيلاء غير مصادق عليه وعبر المستأجرين على قناة مشاركة FastGPT الخاصة بـ WeChat iLink، يعتمد فقط على shareId العام. | ---|--- CVE| CVE-2026-68929 CVSS 4.0 9.3 حرج Advisory| GHSA-q4pr-3qpg-9q5v المتأثر| FastGPT = 4.14.10, = 4.15.0, . qrcode/status — ...

CVE-2026-8732-EXPLOIT

CVE-2026-8732 – WordPress WP Maps Pro Exploit 인증되지 않은 관리자 계정 탈취 | CVSS 9.8 | 즉시 사용 가능 🔥 제공 내용 CVE-2026-8732용 완전 작동 Python 익스플로잇 인증 없는 관리자 계정 생성 매직 로그인 URL 반환 – 즉시 사이트 장악 WP Maps Pro ≤ 6.1.0에서 작동 무흔적, 깔끔, 기본적으로 로그 미남김 ⚡ 왜 저희를 선택해야 하나요 50개 이상의 취약한 대상에서 테스트 완료 불필요한 코드 없음 – 순수 익스플로잇 레드 팀, 모의 침투, 버그...

Exploit for Improper Enforcement of Behavioral Workflow in Mikrotik Routeros

MikroTik RouterOS PoC Collection This repository contains pro...

Exploit for Argument Injection in Mikrotik Routeros

MikroTrick PoC — CVE-2026-86060 RouterOS unauthenticated full...

CVE-2026-86814

The UsersWP - Social Login WordPress plugin (versions before 1.5.10 ) is vulnerable to an unauthenticated account takeover due to improper privilege management. The root cause is that the plugin fails to verify if a social login provider has confirmed ownership of an email address before using th...

CVE-2026-83357

Oracle GraalVM for JDK / Oracle GraalVM (Oracle Java SE, component: Compiler ) contains a vulnerability in affected supported versions: GraalVM for JDK 17 (23.0.13.1), GraalVM for JDK 21 (23.1.12.1), and GraalVM 25.0.4.1. An unauthenticated attacker with network access via HTTP can exploit this f...

CVE-2026-87188

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-83462

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

CVE-2026-83463

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-83283

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83255

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

CVE-2026-83256

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

CVE-2026-83254

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

CVE-2026-83232

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Console / Repository Explorer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-83191

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment...

CVE-2026-83061

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-83035

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...