DEBIAN-CVE-2026-71196

Bulletin has no description...

EUVD-2026-70747

A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption JOSE standards. The issue occurs when the library verifies a General JSON Serialization JWS using a set of keys. Due to a coding error, the library fails to correctly identify the...

CVE-2026-71429

A flaw was found in stream-json. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, deeply nested JSON document. The library's path filters, such as pick and ignore, inefficiently process these structures, leading to excessive resource...

pyfiscan

pyfiscan About Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is hosting-providers keeping eye on their users installations to keep up with security-updates. Fingerprints...

Sudo-Security-Bypass-Vulnerability

इस रिपॉजिटरी में README नहीं है।...

heartbleed-tools

أداة فحص ثغرة Heartbleed في OpenSSL CVE-2014-0160، ومنقّب بيانات، وأدوات استعادة مفتاح RSA. المؤلف: Einar Otto Stangvik / @einaros / https://hacking.ventures بما أن السر قد أصبح معروفًا منذ فترة طويلة، وبدأ الآخرون في نشر أدواتهم، فأنا أنشر أدواتي أيضًا. آمل أن يزيد هذا الضغط على أولئك الذين لم...

EUVD-2026-70746

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

Important: Red Hat Security Advisory: satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

A new satellite/iop-vulnerability-engine-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages...

EUVD-2026-70745

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code,...

CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 كاشف ثغرة WebKit إثبات المفهوم يكتشف إثبات المفهوم هذا ما إذا كان المتصفح المبني على WebKit عرضة للثغرة CVE‑2025‑24201 ، وهي ثغرة كتابة خارج الحدود عالية الخطورة ناتجة عن التحقق غير الصحيح من القدرات في تطبيق WebGL. 🔍 ملخص الثغرة يتم تفعيل CVE‑2025‑24201 عندما يسمح...

EUVD-2026-70744

IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

EUVD-2026-70743

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

EUVD-2026-70742

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omission may allow a remote attacker to exploit misconfigurations or naming collisions to redirect application requests to an...

EUVD-2026-70741

parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes...

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP ثغرة القراءة التعسفية في النواة + استغلال Superfetch EOP استنادًا إلى بحث من https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ . يجب تشغيل الاستغلال من مستوى تكامل منخفض...

EUVD-2026-70740

parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a...

EUVD-2026-70739

toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse uses a Peggy 5.1.0 generated recursive-descent parser in lib/parser.js whose peg$parsevalue, peg$parsearray, and peg$parseinlinetableentry functions recurse through nested arrays and inline tables without a depth...

powersap

PowerSAP PowerSAP is a simple powershell re-implementation of popular & effective techniques of all public tools such as Bizploit, Metasploit auxiliary modules, or python scripts available on the Internet. This re-implementation does not contain any new or undisclosed vulnerability. PowerSAP allo...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — अप्रमाणित विशेषाधिकार वृद्धि Unauthenticated Privilege Escalation भूमिका इंजेक्शन Role Injection के माध्यम से 🔥 भेद्यता सारांश Vulnerability Summary वर्डप्रेस प्लगइन Doctreat Core संस्करण = 1.6.8 एक अप्रमाणित विशेषाधिकार वृद्धि भेद्यता से ग्रस्त है। यह गंभी...

EUVD-2026-70738

toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse in lib/compiler.js can be tricked by a table path such as a.b.y.proto.proto, allowing traversal from a scalar value into Number.prototype and Object.prototype. The currentPath tracking value uses both arrays and...