جاري التحميل
📧 info@ciso.sa | 📱 +966550939344 | الرياض، المملكة العربية السعودية
🔧 صيانة مجدولة — السبت 2:00-4:00 صباحاً. قد تكون بعض الميزات غير متاحة مؤقتاً.    ●   
💎
خطة Pro بخصم 50% احصل على جميع ميزات AI والتقارير غير المحدودة والدعم ذي الأولوية. ترقّ الآن
مركز البحث
ESC للإغلاق
Global vulnerability الأجهزة المحمولة / الإلكترونيات الاستهلاكية HIGH 6h Global ransomware قطاعات متعددة CRITICAL 6h Global malware الشبكات / البنية التحتية CRITICAL 7h Global ransomware تكنولوجيا المعلومات، البنية التحتية للمحاكاة الافتراضية CRITICAL 8h Global supply_chain تطوير البرمجيات وعمليات DevOps CRITICAL 9h Global supply_chain تطوير البرامج والتكنولوجيا CRITICAL 10h Global apt قطاعات متعددة HIGH 12h Global general المحتوى الرقمي وحقوق الملكية الفكرية MEDIUM 12h Global malware قطاع التكنولوجيا وتطوير البرامج CRITICAL 13h Global ddos تكنولوجيا ووسائل التواصل الاجتماعي HIGH 13h Global vulnerability الأجهزة المحمولة / الإلكترونيات الاستهلاكية HIGH 6h Global ransomware قطاعات متعددة CRITICAL 6h Global malware الشبكات / البنية التحتية CRITICAL 7h Global ransomware تكنولوجيا المعلومات، البنية التحتية للمحاكاة الافتراضية CRITICAL 8h Global supply_chain تطوير البرمجيات وعمليات DevOps CRITICAL 9h Global supply_chain تطوير البرامج والتكنولوجيا CRITICAL 10h Global apt قطاعات متعددة HIGH 12h Global general المحتوى الرقمي وحقوق الملكية الفكرية MEDIUM 12h Global malware قطاع التكنولوجيا وتطوير البرامج CRITICAL 13h Global ddos تكنولوجيا ووسائل التواصل الاجتماعي HIGH 13h Global vulnerability الأجهزة المحمولة / الإلكترونيات الاستهلاكية HIGH 6h Global ransomware قطاعات متعددة CRITICAL 6h Global malware الشبكات / البنية التحتية CRITICAL 7h Global ransomware تكنولوجيا المعلومات، البنية التحتية للمحاكاة الافتراضية CRITICAL 8h Global supply_chain تطوير البرمجيات وعمليات DevOps CRITICAL 9h Global supply_chain تطوير البرامج والتكنولوجيا CRITICAL 10h Global apt قطاعات متعددة HIGH 12h Global general المحتوى الرقمي وحقوق الملكية الفكرية MEDIUM 12h Global malware قطاع التكنولوجيا وتطوير البرامج CRITICAL 13h Global ddos تكنولوجيا ووسائل التواصل الاجتماعي HIGH 13h
📅 النشرة الأمنية اليومية — 30 Mar 2026

🇸🇦 النشرة الأمنية السعودية

جميع الثغرات الأمنية والتهديدات والأخبار المجمّعة اليوم من مصادر موثوقة — محدّث باستمرار

62 ثغرة
0 تهديد
0 خبر
8 حرجة
7 CISA KEV
🛡 الثغرات الأمنية (CVE)
62 ثغرة
CVE-2026-3055
ثغرة قراءة خارج الحدود في Citrix NetScaler SAML IDP (CVE-2026-3055)
01:52 KSA
حرج CVSS 9.8 ⚠ CISA KEV
تؤثر هذه الثغرة على Citrix NetScaler ADC (المعروف سابقاً باسم Citrix ADC) و NetScaler Gateway و NetScaler ADC FIPS و NDcPP عند تكوينها كمزود هوية SAML. تسمح الثغرة بقراءة البيانات خارج حدود الذاكرة المخصصة مما قد يؤدي إلى الكشف عن معلومات حساسة. الثغرة مدرجة في قائمة الثغرات المع…
CVE-2026-34714
تنفيذ أكواد في Vim عبر حقن %{expr} في Tabpanel (CVE-2026-34714)
21:26 KSA
حرج CVSS 9.2 CWE-78
تحتوي نسخ Vim السابقة للإصدار 9.2.0272 على ثغرة حرجة تسمح بتنفيذ أكواد عشوائية عند فتح ملف مصنوع بعناية. الثغرة تنشأ من حقن %{expr} في مكون tabpanel الذي يفتقد حماية P_MLE. المهاجمون يمكنهم استغلال هذا لتنفيذ أوامر نظام بامتيازات المستخدم.
CVE-2015-2424
ثغرة تلف الذاكرة في Microsoft PowerPoint
11:01 KSA
حرج CVSS 9.0 ⚠ CISA KEV
ثغرة تلف الذاكرة في Microsoft PowerPoint تمكن المهاجمين البعيدين من تنفيذ كود عشوائي أو التسبب في رفض الخدمة (تلف الذاكرة) عن طريق إرسال مستند Office معيب بشكل خاص
CVE-2015-2425
ثغرة تلف الذاكرة في متصفح Microsoft Internet Explorer
11:01 KSA
حرج CVSS 9.0 ⚠ CISA KEV
ثغرة حرجة في متصفح Microsoft Internet Explorer تتعلق بتلف الذاكرة. تسمح هذه الثغرة للمهاجمين البعيدين بتنفيذ أكواد برمجية عشوائية أو التسبب في حالة رفض الخدمة (DoS) على الأنظمة المتأثرة.
CVE-2015-2426
ثغرة تنفيذ الأكواد البعيدة في مكتبة Adobe Type Manager في Microsoft Windows
11:01 KSA
حرج CVSS 9.0 ⚠ CISA KEV
توجد ثغرة تنفيذ أكواد بعيدة في Microsoft Windows عندما تتعامل مكتبة Windows Adobe Type Manager بشكل غير صحيح مع خطوط OpenType المصممة بشكل خاص. يمكن للمهاجم استغلال هذه الثغرة لتنفيذ أكواد عشوائية على النظام المتأثر.
CVE-2015-2502
ثغرة تلف الذاكرة في متصفح Microsoft Internet Explorer
11:01 KSA
حرج CVSS 9.0 ⚠ CISA KEV
ثغرة حرجة في متصفح Microsoft Internet Explorer تتعلق بتلف الذاكرة، مما يمكن المهاجم من تنفيذ أكواد برمجية عشوائية أو إحداث هجوم حرمان الخدمة (DoS) على النظام المتأثر
CVE-2015-2545
ثغرة ملف EPS معيب في Microsoft Office
11:01 KSA
حرج CVSS 9.0 ⚠ CISA KEV
تحتوي Microsoft Office على ثغرة أمنية تسمح للمهاجمين البعيدين بتنفيذ كود عشوائي عن طريق إنشاء ملف صورة EPS معيب بشكل متعمد
CVE-2015-2419
ثغرة تلف الذاكرة في Microsoft Internet Explorer
11:01 KSA
حرج CVSS 9.0 ⚠ CISA KEV
ثغرة حرجة في تلف الذاكرة في Microsoft Internet Explorer تتعلق بمحرك JScript. يمكن للمهاجمين البعيدين استغلال هذه الثغرة من خلال إنشاء موقع ويب ضار لتنفيذ كود بعيد على أجهزة الضحايا أو التسبب في رفض الخدمة عن طريق إفساد الذاكرة.
CVE-2026-5155
A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan o
21:26 KSA
عالٍ CVSS 8.8 CWE-119
A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can be executed remotely. The exp…
CVE-2026-5154
A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /
21:26 KSA
عالٍ CVSS 8.8 CWE-119
A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the component Parameter Handler. The manipulation of the argument funcname leads to stack-based buffer overflow. Remote exploitation of the att…
CVE-2026-5152
A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/crea
21:26 KSA
عالٍ CVSS 8.8 CWE-119
A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the argument fileNameMit results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is n…
CVE-2026-5130
The Debugger & Troubleshooter plugin for WordPress was vulnerable to Unauthenticated Privilege Escalation in versions up
21:26 KSA
عالٍ CVSS 8.8 CWE-565
The Debugger & Troubleshooter plugin for WordPress was vulnerable to Unauthenticated Privilege Escalation in versions up to and including 1.3.2. This was due to the plugin accepting the wp_debug_troubleshoot_simulate_user cookie value directly as a user ID without any cryptograph…
CVE-2026-30932
Froxlor is open source server administration software. Prior to version 2.3.5, the DomainZones.add API endpoint (accessi
23:54 KSA
عالٍ CVSS 8.8 CWE-74
Froxlor is open source server administration software. Prior to version 2.3.5, the DomainZones.add API endpoint (accessible to customers with DNS enabled) does not validate the content field for several DNS record types (LOC, RP, SSHFP, TLSA). An attacker can inject newlines and …
CVE-2026-20631
A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user may be able to elevate
23:54 KSA
عالٍ CVSS 8.8
A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user may be able to elevate privileges.
CVE-2026-4415
Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is ena
21:26 KSA
عالٍ CVSS 8.1 CWE-23
Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or priv…
CVE-2026-2370
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 1
21:26 KSA
عالٍ CVSS 8.1 CWE-233
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 affecting Jira Connect installations that could have allowed an authenticated user with minimal workspace permissions to obtain installation…
CVE-2026-4416
The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticate
21:26 KSA
عالٍ CVSS 7.8 CWE-502
The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.
CVE-2026-32948
sbt is a build tool for Scala, Java, and others. From version 0.9.5 to before version 1.12.7, on Windows, sbt uses Proce
23:54 KSA
عالٍ CVSS 7.8 CWE-78
sbt is a build tool for Scala, Java, and others. From version 0.9.5 to before version 1.12.7, on Windows, sbt uses Process("cmd", "/c", ...) to run VCS commands (git, hg, svn). The URI fragment (branch, tag, revision) is user-controlled via the build definition and passed to thes…
CVE-2025-33247
NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code executi
23:54 KSA
عالٍ CVSS 7.8 CWE-502
NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33248
NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convin
23:54 KSA
عالٍ CVSS 7.8 CWE-502
NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information dis…
CVE-2026-20698
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4
23:54 KSA
عالٍ CVSS 7.8 CWE-787
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-24150
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a use
23:54 KSA
عالٍ CVSS 7.8 CWE-502
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, a…
CVE-2026-24151
NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to lo
23:54 KSA
عالٍ CVSS 7.8 CWE-502
NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and dat…
CVE-2026-24152
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a use
23:54 KSA
عالٍ CVSS 7.8 CWE-502
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, a…
CVE-2026-31831
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/
21:26 KSA
عالٍ CVSS 7.5 CWE-23
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images API endpoint is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. …
CVE-2026-3124
The Download Monitor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and i
21:26 KSA
عالٍ CVSS 7.5 CWE-639
The Download Monitor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.7 via the executePayment() function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to co…
CVE-2026-33028
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui application is vulnerabl
21:26 KSA
عالٍ CVSS 7.5 CWE-362
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui application is vulnerable to a Race Condition. Due to the complete absence of synchronization mechanisms (Mutex) and non-atomic file writes, concurrent requests lead to the severe corr…
CVE-2026-33306
bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt() password hashing algorithm. Prior to version 3.1.22, an integer o
23:54 KSA
عالٍ CVSS 7.5 CWE-190
bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt() password hashing algorithm. Prior to version 3.1.22, an integer overflow in the Java BCrypt implementation for JRuby can cause zero iterations in the strengthening loop. Impacted applications must be setting the cost to 31 t…
CVE-2026-33332
NiceGUI is a Python-based UI framework. Prior to version 3.9.0, NiceGUI's app.add_media_file() and app.add_media_files()
23:54 KSA
عالٍ CVSS 7.5 CWE-20
NiceGUI is a Python-based UI framework. Prior to version 3.9.0, NiceGUI's app.add_media_file() and app.add_media_files() media routes accept a user-controlled query parameter that influences how files are read during streaming. The parameter is passed to the range-response implem…
CVE-2026-33498
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version
23:54 KSA
عالٍ CVSS 7.5 CWE-674
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.55 and 9.6.0-alpha.44, an attacker can send an unauthenticated HTTP request with a deeply nested query containing logical operators to permanently hang th…
CVE-2026-33508
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version
23:54 KSA
عالٍ CVSS 7.5 CWE-674
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.56 and 9.6.0-alpha.45, Parse Server's LiveQuery component does not enforce the requestComplexity.queryDepth configuration setting when processing WebSocke…
CVE-2026-33509
pyLoad is a free and open-source download manager written in Python. From version 0.4.0 to before version 0.5.0b3.dev97,
23:54 KSA
عالٍ CVSS 7.5 CWE-269
pyLoad is a free and open-source download manager written in Python. From version 0.4.0 to before version 0.5.0b3.dev97, the set_config_value() API endpoint allows users with the non-admin SETTINGS permission to modify any configuration option without restriction. The reconnect.s…
CVE-2026-33538
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version
23:54 KSA
عالٍ CVSS 7.5 CWE-400
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.58 and 9.6.0-alpha.52, an unauthenticated attacker can cause denial of service by sending authentication requests with arbitrary, unconfigured provider na…
CVE-2026-2328
An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their i
21:26 KSA
عالٍ CVSS 7.5 CWE-790
An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information.
CVE-2019-25654
Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplyin
21:26 KSA
عالٍ CVSS 7.5 CWE-787
Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field. Attackers can paste a malicious payload containing 7000 bytes of data into the domain configuration to tr…
CVE-2026-32979
OpenClaw before 2026.3.11 contains an approval integrity vulnerability allowing attackers to execute rewritten local cod
23:27 KSA
عالٍ CVSS 7.3 CWE-367
OpenClaw before 2026.3.11 contains an approval integrity vulnerability allowing attackers to execute rewritten local code by modifying scripts between approval and execution when exact file binding cannot occur. Remote attackers can change approved local scripts before execution …
CVE-2026-5147
A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This affects an unknown part of the file /admin
21:26 KSA
عالٍ CVSS 7.3 CWE-74
A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This affects an unknown part of the file /admin-api/system/tenant/get-by-website. The manipulation of the argument Website results in sql injection. It is possible to launch the attack remotely. The exploit …
CVE-2026-5150
A security vulnerability has been detected in code-projects Accounting System 1.0. This issue affects some unknown proce
21:26 KSA
عالٍ CVSS 7.3 CWE-74
A security vulnerability has been detected in code-projects Accounting System 1.0. This issue affects some unknown processing of the file /viewin_costumer.php of the component Parameter Handler. Such manipulation of the argument cos_id leads to sql injection. The attack can be la…
CVE-2026-33539
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version
23:54 KSA
عالٍ CVSS 7.2 CWE-89
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.59 and 9.6.0-alpha.53, an attacker with master key access can execute arbitrary SQL statements on the PostgreSQL database by injecting SQL metacharacters …
CVE-2026-33987
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry
09:57 KSA
عالٍ CVSS 7.1 CWE-122
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry_v3() in libfreerdp/cache/persistent.c, persistent->bmpSize is updated before winpr_aligned_recalloc(). If realloc fails, bmpSize is inflated while bmpData poin…
CVE-2026-33982
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflo
21:26 KSA
عالٍ CVSS 7.1 CWE-125
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpr_aligned_offset_recalloc(). This issue has been patched in version 3.24.2.
CVE-2026-33027
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui configuration improperly
09:57 KSA
متوسط CVSS 6.5 CWE-22
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui configuration improperly handles URL-encoded traversal sequences. When specially crafted paths are supplied, the backend resolves them to the base Nginx configuration directory and exe…
CVE-2026-33977
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can cra
09:57 KSA
متوسط CVSS 6.5 CWE-617
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by sending audio data in IMA ADPCM format with an invalid initial step index value (>= 89). The unvalidated step index is read directly fr…
CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length fie
09:57 KSA
متوسط CVSS 6.5 CWE-617
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting through a malicious RDP …
CVE-2026-5126
A flaw has been found in SourceCodester RSS Feed Parser 1.0. Affected by this issue is the function file_get_contents. T
09:57 KSA
متوسط CVSS 6.3 CWE-918
A flaw has been found in SourceCodester RSS Feed Parser 1.0. Affected by this issue is the function file_get_contents. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVE-2026-5153
A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/Wr
09:57 KSA
متوسط CVSS 6.3 CWE-74
A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and m…
CVE-2018-25227
Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application b
23:27 KSA
متوسط CVSS 6.2 CWE-466
Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can trigger the crash by pasting a 256-byte buffer of repeated characters into the Host para…
CVE-2018-25228
NetSetMan 4.7.1 contains a buffer overflow vulnerability in the Workgroup feature that allows local attackers to crash t
23:27 KSA
متوسط CVSS 6.2 CWE-787
NetSetMan 4.7.1 contains a buffer overflow vulnerability in the Workgroup feature that allows local attackers to crash the application by supplying oversized input. Attackers can create a malicious configuration file with excessive data and paste it into the Workgroup field to tr…
CVE-2018-25226
FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by su
23:27 KSA
متوسط CVSS 6.2 CWE-787
FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the account name field. Attackers can trigger a denial of service by pasting a 417-byte payload into the 'Account name to …
CVE-2018-25234
SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the applicati
23:27 KSA
متوسط CVSS 6.2 CWE-466
SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can paste a buffer of 300 repeated characters into the Host connection parameter to trig…
CVE-2018-25231
يحتوي تطبيق HeidiSQL الإصدار 9.5.0.5196 على ثغرة حرمان من الخدمة التي تسمح للمهاجمين المحليين بإيقاف التطبيق عن العمل من
23:27 KSA
متوسط CVSS 6.2 CWE-98
يحتوي تطبيق HeidiSQL الإصدار 9.5.0.5196 على ثغرة حرمان من الخدمة التي تسمح للمهاجمين المحليين بإيقاف التطبيق عن العمل من خلال توفير مسار ملف طويل بشكل مفرط في تفضيلات التسجيل. يمكن للمهاجمين إدخال حمولة تجاوز المخزن المؤقت عبر حقل مسار ملف سجل SQL في قائمة التفضيلات > التسجيل لتف…
CVE-2018-25233
WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by s
23:27 KSA
متوسط CVSS 6.2 CWE-233
WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the username field during Secure WebDAV connection setup. Attackers can input a buffer-overflow payload of 5000 bytes in …
CVE-2019-25655
يحتوي برنامج Device Monitoring Studio الإصدار 8.10.00.8925 على ثغرة حرمان من الخدمة تسمح للمهاجمين المحليين بإيقاف التطب
23:27 KSA
متوسط CVSS 6.2 CWE-1316
يحتوي برنامج Device Monitoring Studio الإصدار 8.10.00.8925 على ثغرة حرمان من الخدمة تسمح للمهاجمين المحليين بإيقاف التطبيق عن العمل من خلال إدخال سلسلة نصية طويلة بشكل مفرط في نافذة حوار اتصال الخادم. يمكن للمهاجمين تفعيل الانهيار بإدخال اسم خادم أو عنوان غير صحيح يحتوي على أحرف …
CVE-2019-25653
Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the applicati
23:27 KSA
متوسط CVSS 6.2 CWE-620
Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the password field. Attackers can paste a buffer of 550 repeated characters into the password parameter during Ora…
CVE-2018-25235
خادم NetworkActiv الويب الإصدار 4.0 يحتوي على ثغرة تجاوز المخزن المؤقت في حقل اسم المستخدم ضمن خيارات الأمان، مما يسمح ل
23:27 KSA
متوسط CVSS 6.2 CWE-787
خادم NetworkActiv الويب الإصدار 4.0 يحتوي على ثغرة تجاوز المخزن المؤقت في حقل اسم المستخدم ضمن خيارات الأمان، مما يسمح للمهاجمين المحليين بإيقاف التطبيق عن العمل من خلال إدخال سلسلة نصية طويلة بشكل مفرط. يمكن للمهاجمين تفعيل هجوم حرمان الخدمة بإدخال قيمة اسم مستخدم معدة بعناية تت…
CVE-2026-5119
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies
23:27 KSA
متوسط CVSS 5.9 CWE-319
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leadi…
CVE-2018-25230
Free IP Switcher 3.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by su
23:27 KSA
متوسط CVSS 5.5 CWE-787
Free IP Switcher 3.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Computer Name field. Attackers can paste a malicious payload into the Computer Name input field and click Activate to …
CVE-2018-25232
Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the applicatio
23:27 KSA
متوسط CVSS 5.5 CWE-1285
Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the custom log files location field. Attackers can input a buffer of 2000 characters in the Log Files Location cust…
CVE-2018-25229
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that a
23:27 KSA
متوسط CVSS 5.5 CWE-1282
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that allows local attackers to crash the application by supplying an oversized string. Attackers can input a buffer of 257 'A' characters in the SMTP Server field and…
CVE-2026-27508
Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redire
23:27 KSA
متوسط CVSS 5.4 CWE-79
Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of the url parameter. Attackers can craft malicious URLs with javascript: schemes that execute arbitrary JavaScript i…
CVE-2026-26352
Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/v
23:27 KSA
متوسط CVSS 5.4 CWE-79
Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of the VPN_IP parameter. Authenticated attackers can inject arbitrary JavaScript through VPN configuration settings…
CVE-2026-5125
A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function child_
09:57 KSA
متوسط CVSS 5.3 CWE-77
A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function child_process.execSync of the file src/server.ts. The manipulation of the argument git_diff.base_ref/git_diff.files results in os command injection. The attack is onl…
⚠️ استخبارات التهديدات
0 تهديد
⚠️ لا توجد تهديدات مسجّلة اليوم حتى الآن
📰 أخبار الأمن السيبراني
0 مقال
📰 لا توجد أخبار مجمّعة اليوم حتى الآن

يتم تحديث هذه النشرة تلقائياً يومياً — آخر تحديث: 30 Mar 2026
أرشيف الثغرات · التهديدات · الأخبار

📣 وجدت هذا مفيداً؟
شاركه مع شبكة الأمن السيبراني الخاصة بك
in لينكدإن 𝕏 تويتر 💬 واتساب ✈ تليجرام
🍪 إعدادات الخصوصية
سيزو للاستشارات — متوافق مع نظام حماية البيانات الشخصية السعودي (PDPL)
نستخدم ملفات تعريف الارتباط والتقنيات المشابهة لتوفير أفضل تجربة على منصتنا. يمكنك اختيار الأنواع التي تقبلها.
🔒
ملفات ضرورية Always On
مطلوبة لعمل الموقع بشكل صحيح. لا يمكن تعطيلها.
📋 الجلسات، CSRF، المصادقة، تفضيلات اللغة
📊
ملفات التحليلات
تساعدنا في فهم كيفية استخدام الزوار للموقع وتحسين الأداء.
📋 إحصائيات الصفحات، مدة الجلسة، مصدر الزيارة
⚙️
ملفات وظيفية
تتيح ميزات محسنة مثل تخصيص المحتوى والتفضيلات.
📋 السمة المظلمة/الفاتحة، حجم الخط، لوحات التحكم المخصصة
📣
ملفات تسويقية
تُستخدم لتقديم محتوى وإعلانات ذات صلة باهتماماتك.
📋 تتبع الحملات، إعادة الاستهداف، تحليلات وسائل التواصل
سياسة الخصوصية →
مساعد CISO الذكي
اسألني أي شيء · وثائق · دعم
🔐

عرّفنا بنفسك

أدخل بياناتك للوصول إلى المساعد الكامل

معلوماتك آمنة ولن تُشارك
💬
المساعد السيبراني
متصل — يرد في ثوانٍ
5 / 5
🔐 تحقق من هويتك

أدخل بريدك الإلكتروني لإرسال رمز تحقق قبل إرسال طلب الدعم.

Enter للإرسال · / للأوامر 0 / 2000
CISO AI · مدعوم بالذكاء الاصطناعي
✦ استطلاع سريع ساعدنا في تحسين منصة سيزو للاستشارات ملاحظاتك تشكّل مستقبل منصتنا — لا تستغرق سوى دقيقتين.
⚠ يرجى الإجابة على هذا السؤال للمتابعة

كيف تقيّم تجربتك العامة مع منصتنا؟

قيّم من 1 (ضعيف) إلى 5 (ممتاز)

🎉
شكراً جزيلاً!
تم تسجيل إجابتك بنجاح.