متاح الآن! بحث تيليغرام 2025 — أهم رؤى العام 
CVE Notify
الذهاب إلى القناة على Telegram
Alert on the latest CVEs Partner channel: @malwr
إظهار المزيد📈 نظرة تحليلية على قناة تيليجرام CVE Notify
تُعد قناة CVE Notify (@cvenotify) في القطاع اللغوي الإنكليزية لاعباً نشطاً. يضم المجتمع حالياً 19 014 مشتركاً، محتلاً المرتبة 7 021 في فئة التكنولوجيات والتطبيقات والمرتبة 2 054 في منطقة الولايات المتحدة.
📊 مؤشرات الجمهور والحراك
منذ تأسيسه في невідомо، حقق المشروع نمواً سريعاً وجمع 19 014 مشتركاً.
بحسب آخر البيانات بتاريخ 30 يونيو, 2026، تحافظ القناة على نشاط مستقر. خلال آخر 30 يوماً تغيّر عدد الأعضاء بمقدار 301، وفي آخر 24 ساعة بمقدار 0، مع بقاء الوصول العام مرتفعاً.
- حالة التحقق: غير موثّقة
- معدل التفاعل (ER): يبلغ متوسط تفاعل الجمهور 0.15%. وخلال أول 24 ساعة من النشر يحصد المحتوى عادةً 0.07% من ردود الفعل نسبةً إلى إجمالي المشتركين.
- وصول المنشورات: يحصل كل منشور على متوسط 28 مشاهدة. وخلال اليوم الأول يجمع عادةً 14 مشاهدة.
- التفاعلات والاستجابة: يتفاعل الجمهور بانتظام؛ متوسط التفاعلات لكل منشور يبلغ 1.
- الاهتمامات الموضوعية: يركز المحتوى على مواضيع رئيسية مثل cve-2026, attack, input, validation, manipulation.
📝 الوصف وسياسة المحتوى
يصف المؤلف القناة بأنها مساحة للتعبير عن الآراء الذاتية:
“Alert on the latest CVEs
Partner channel: @malwr”
بفضل وتيرة التحديث المرتفعة (أحدث البيانات بتاريخ 01 يوليو, 2026) تحافظ القناة على حداثتها ومستوى وصول مرتفع. وتُظهر التحليلات تفاعلاً نشطاً من الجمهور، ما يجعلها نقطة تأثير مهمة ضمن فئة التكنولوجيات والتطبيقات.
19 014
المشتركون
لا توجد بيانات24 ساعات
+57 أيام
+30130 أيام
جاري تحميل البيانات...
القنوات المماثلة
سحابة العلامات
الإشارات الواردة والصادرة
---
---
---
---
---
---
جذب المشتركين
يونيو '26
يونيو '26
+314
في 0 قنوات
مايو '26
+531
في 2 قنوات
Get PRO
أبريل '26
+278
في 1 قنوات
Get PRO
مارس '26
+266
في 3 قنوات
Get PRO
فبراير '26
+423
في 1 قنوات
Get PRO
يناير '26
+436
في 1 قنوات
Get PRO
ديسمبر '25
+713
في 3 قنوات
Get PRO
نوفمبر '25
+453
في 1 قنوات
Get PRO
أكتوبر '25
+320
في 1 قنوات
Get PRO
سبتمبر '25
+190
في 0 قنوات
Get PRO
أغسطس '25
+198
في 0 قنوات
Get PRO
يوليو '25
+280
في 0 قنوات
Get PRO
يونيو '25
+178
في 0 قنوات
Get PRO
مايو '25
+207
في 0 قنوات
Get PRO
أبريل '25
+262
في 0 قنوات
Get PRO
مارس '25
+207
في 0 قنوات
Get PRO
فبراير '25
+179
في 0 قنوات
Get PRO
يناير '25
+214
في 3 قنوات
Get PRO
ديسمبر '24
+299
في 0 قنوات
Get PRO
نوفمبر '24
+831
في 1 قنوات
Get PRO
أكتوبر '24
+997
في 2 قنوات
Get PRO
سبتمبر '24
+1 432
في 1 قنوات
Get PRO
أغسطس '24
+1 728
في 3 قنوات
Get PRO
يوليو '24
+1 253
في 2 قنوات
Get PRO
يونيو '24
+1 168
في 2 قنوات
Get PRO
مايو '24
+1 342
في 0 قنوات
Get PRO
أبريل '24
+1 457
في 1 قنوات
Get PRO
مارس '24
+1 255
في 2 قنوات
Get PRO
فبراير '24
+845
في 1 قنوات
Get PRO
يناير '24
+462
في 1 قنوات
Get PRO
ديسمبر '23
+451
في 1 قنوات
Get PRO
نوفمبر '23
+140
في 1 قنوات
Get PRO
أكتوبر '23
+194
في 0 قنوات
Get PRO
سبتمبر '23
+174
في 0 قنوات
Get PRO
أغسطس '23
+179
في 0 قنوات
Get PRO
يوليو '23
+114
في 0 قنوات
Get PRO
يونيو '23
+136
في 0 قنوات
Get PRO
مايو '23
+108
في 0 قنوات
Get PRO
أبريل '23
+147
في 0 قنوات
Get PRO
مارس '23
+174
في 0 قنوات
Get PRO
فبراير '23
+108
في 0 قنوات
Get PRO
يناير '23
+107
في 0 قنوات
Get PRO
ديسمبر '22
+102
في 0 قنوات
Get PRO
نوفمبر '22
+152
في 0 قنوات
Get PRO
أكتوبر '22
+74
في 0 قنوات
Get PRO
سبتمبر '22
+97
في 0 قنوات
Get PRO
أغسطس '22
+142
في 0 قنوات
Get PRO
يوليو '22
+93
في 0 قنوات
Get PRO
يونيو '22
+109
في 0 قنوات
Get PRO
مايو '22
+194
في 0 قنوات
Get PRO
أبريل '22
+94
في 0 قنوات
Get PRO
مارس '22
+153
في 0 قنوات
Get PRO
فبراير '22
+155
في 0 قنوات
Get PRO
يناير '22
+160
في 0 قنوات
Get PRO
ديسمبر '21
+203
في 0 قنوات
Get PRO
نوفمبر '21
+47
في 0 قنوات
Get PRO
أكتوبر '21
+76
في 0 قنوات
Get PRO
سبتمبر '21
+88
في 0 قنوات
Get PRO
أغسطس '21
+339
في 0 قنوات
Get PRO
يوليو '21
+92
في 0 قنوات
Get PRO
يونيو '21
+5
في 0 قنوات
Get PRO
مايو '21
+24
في 0 قنوات
Get PRO
أبريل '21
+18
في 0 قنوات
Get PRO
مارس '21
+37
في 0 قنوات
Get PRO
فبراير '21
+101
في 0 قنوات
Get PRO
يناير '21
+324
في 0 قنوات
| التاريخ | نمو المشتركين | الإشارات | القنوات | |
| 24 يونيو | +8 | |||
| 23 يونيو | +12 | |||
| 22 يونيو | +15 | |||
| 21 يونيو | +7 | |||
| 20 يونيو | +10 | |||
| 19 يونيو | +10 | |||
| 18 يونيو | +2 | |||
| 17 يونيو | +6 | |||
| 16 يونيو | +4 | |||
| 15 يونيو | +26 | |||
| 14 يونيو | +14 | |||
| 13 يونيو | +13 | |||
| 12 يونيو | +17 | |||
| 11 يونيو | +15 | |||
| 10 يونيو | +11 | |||
| 09 يونيو | +18 | |||
| 08 يونيو | +23 | |||
| 07 يونيو | +15 | |||
| 06 يونيو | +6 | |||
| 05 يونيو | +15 | |||
| 04 يونيو | +35 | |||
| 03 يونيو | +14 | |||
| 02 يونيو | +7 | |||
| 01 يونيو | +11 |
منشورات القناة
🚨 CVE-2026-9107
The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'meta[kaliforms_field_components]' parameter in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
🎖@cveNotify
| 2 | 🚨 CVE-2026-7840
UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administration server. The functions wi_senderr() and wi_replyhdr() in repeater/webgui/webutils.c write the caller-supplied HTTP request URI into a fixed 1000-byte global buffer (hdrbuf) via unchecked sprintf calls. The HTTP receive buffer accepts URIs up to approximately 150 KB (WI_RXBUFSIZE = 153600), so an unauthenticated attacker who can reach the repeater HTTP port (default TCP 80) can overflow hdrbuf by at least 500 bytes with a single HTTP request containing a URI of 1500 bytes or longer, corrupting adjacent .bss-segment globals. The overflow occurs before any authentication check, making it reachable without credentials. A remote, unauthenticated attacker can achieve arbitrary code execution on the host running the repeater.
🎖@cveNotify | 13 |
| 3 | 🚨 CVE-2026-7839
UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.c:197, when settings2.txt is absent on first run the repeater writes the literal string "adminadmi2" as the admin password via strcpy_s(saved_password, 64, "adminadmi2"). The HTTP Basic-auth handler wi_decode_auth() checks this password without rate-limiting or lockout. Any remote attacker who can reach the repeater HTTP port (default TCP 80) can authenticate as administrator using the well-known default credential on a fresh or unmodified installation, gaining full control of the repeater configuration including allow/deny rules and session visibility.
🎖@cveNotify | 8 |
| 4 | 🚨 CVE-2026-7838
UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer overflow in the RFB protocol failure-response parsing path. In vncviewer/ClientConnection.cpp, the 4-byte network-supplied reasonLen field (type CARD32) is passed as reasonLen+1 to CheckBufferSize(). Because both operands are unsigned 32-bit, a reasonLen of 0xFFFFFFFF overflows to 0, causing CheckBufferSize to allocate only 256 bytes. The subsequent ReadString(m_netbuf, reasonLen) call then performs ReadExact for the original 4 GiB length into that 256-byte heap buffer. This overflow is reachable via rfbConnFailed (auth-scheme negotiation) and rfbVncAuthFailed (post-handshake) message types without successful authentication. A malicious VNC server, or any man-in-the-middle on the RFB stream, can trigger this condition when the victim viewer connects, potentially resulting in remote code execution as the user running the viewer. The crash was confirmed with AddressSanitizer on a portable reproduction harness (heap-buffer-overflow WRITE at offset 256).
🎖@cveNotify | 3 |
| 5 | 🚨 CVE-2026-7831
UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConnection.cpp, when the server-supplied nameLength equals exactly 2024 the code declares a 2024-byte stack buffer _dn[2024] and calls ReadString(_dn, 2024). ReadString writes the NUL terminator at buf[length], i.e., _dn[2024], one byte past the end of the stack buffer. A malicious VNC server can trigger this condition by advertising a desktop name of length 2024 in its ServerInit message. On release builds without stack canaries the single-byte NUL overwrite adjacent stack data. On builds with /GS stack protection the canary is corrupted and the process terminates, resulting in denial of service. User interaction (connecting the viewer to the malicious server) is required.
🎖@cveNotify | 2 |
| 6 | 🚨 CVE-2026-7830
UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer (DH_MAX_BITS controls the prime size). A 64-bit DH key can be broken by Pollard's rho algorithm in under one second on current hardware. Additionally, the private exponent is generated by the rng() function, which multiplies three libc rand() values seeded from time(NULL). With approximately 31 bits of internal state and a time-based seed, the private exponent is recoverable in under a minute by a passive observer. A network attacker who can observe the MS-Logon II handshake (via sniffing, recording, or man-in-the-middle) can derive the shared DH key and decrypt the encapsulated username and password, resulting in full credential disclosure. This affects legacy MS-Logon II connections; MS-Logon III (X25519 + AES-256-GCM) is unaffected.
🎖@cveNotify | 1 |
| 7 | 🚨 CVE-2026-7829
UltraVNC repeater through 1.8.2.2 contains a post-authentication out-of-bounds write in the allow/deny rule parser. In repeater/webgui/settings.c:225-272, after strncpy_s copies a rule token into temp1[rule1] (25-byte destination) or temp2/temp3 (16-byte destination), the code unconditionally writes a NUL terminator at temp1[rule1][len] = 0 without clamping len to the destination size. When an authenticated administrator saves a rule with a token length equal to or greater than the destination size, the NUL byte is written one or more bytes past the end of the stack-allocated array, corrupting adjacent stack data. An attacker who has obtained admin credentials (including via CVE-2026-7839 default password) can trigger this to gain code execution on the repeater host.
🎖@cveNotify | 1 |
| 8 | 🚨 CVE-2026-7828
UltraVNC repeater through 1.8.2.2 contains an integer overflow in the HTTP request logging path. In repeater/webgui/settings.c:336, the win_log() function allocates list nodes via malloc(sizeof(struct LIST) + strlen(line)), where line is derived from HTTP request URIs. If strlen(line) is sufficiently large, the addition overflows to a value smaller than sizeof(struct LIST), causing a heap allocation smaller than required. The subsequent strcpy of the full string into the undersized allocation produces a heap buffer overflow. In the current implementation this overflow is bounded by the HTTP receive buffer size (WI_RXBUFSIZE = 153600 bytes, well below SIZE_MAX on 32-bit builds), limiting practical exploitability to a partial heap write. A remote unauthenticated attacker can trigger the theoretical overflow path by sending a maximally-sized URI in an HTTP request to the repeater HTTP port.
🎖@cveNotify | 1 |
| 9 | 🚨 CVE-2026-7517
The Custom Payment Gateways for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alg_wc_cpg_input_fields' parameter in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability is exploitable by unauthenticated guest users submitting a crafted checkout POST request, requiring no custom input fields to be configured in the plugin.
🎖@cveNotify | 1 |
| 10 | 🚨 CVE-2026-6070
The WP-BusinessDirectory plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Deletion in versions up to and including 4.0.1. This is due to insufficient path validation in the remove() method of the JBusinessDirectoryControllerUpload class. The task=upload.remove endpoint is accessible without authentication via the plugin's frontend routing system. The _filename parameter is accepted with RAW filter (no sanitization), and the helper function makePathFile() only normalizes directory separator characters without stripping path traversal sequences (../). When combined with the _path_type=2 parameter, which sets the base directory to the plugin's site folder, an attacker can supply a _filename value containing ../ sequences to traverse outside the plugin directory and call PHP's unlink() on arbitrary files — including wp-config.php, wp-config-backup.php, or other critical server files accessible to the web server process. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.
🎖@cveNotify | 1 |
| 11 | 🚨 CVE-2026-58519
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.
This issue affects Mediawiki - Cargo Extension: from * before 3.9.1.
🎖@cveNotify | 2 |
| 12 | 🚨 CVE-2026-58518
Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery.
This issue affects Mediawiki - RedirectManager Extension: from * before 1.3.3.
🎖@cveNotify | 2 |
| 13 | 🚨 CVE-2026-44041
UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion helper. In rfb/dh.cpp:204, the vncWc2Mb() function passes a caller-supplied WCHAR pointer to wcslen() before any bounds check. If the caller provides a wide-character buffer that is not properly NUL-terminated, wcslen() reads past the end of the buffer until it encounters a NUL wchar, resulting in an out-of-bounds read. Under typical Win32 API usage this requires an abnormal caller contract. Impact is limited to a potential information disclosure from adjacent memory regions or a process crash (denial of service) if the over-read crosses a page boundary.
🎖@cveNotify | 2 |
| 14 | 🚨 CVE-2026-44040
UltraVNC through 1.8.2.2 uses a cryptographically weak pseudo-random number generator to produce VNC authentication challenge bytes. In rfb/vncauth.c:119-129, the vncRandomBytes() function seeds libc rand() with time(0) + getpid() + rand() and generates a 16-byte challenge. The combined seed space is approximately 31 bits (libc rand() internal state) and is entirely determined by publicly-observable values (wall-clock time and process ID). An attacker who can observe the authentication exchange can enumerate the seed space and predict the challenge within seconds, enabling forgery or offline brute-forcing of responses. Note: on Windows, the active code path may use vncEncryptBytes2.cpp which calls CryptGenRandom; reachability on shipped Windows binaries requires compile-graph verification and is under investigation.
🎖@cveNotify | 2 |
| 15 | 🚨 CVE-2026-2387
The Event Organiser plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.12.9. This is due to the 'eo_events' shortcode accepting attacker-controlled 'no_events' content and rendering it in event list templates without output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
🎖@cveNotify | 3 |
| 16 | 🚨 CVE-2026-13731
The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.4.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The AJAX nonce required to authenticate the save request is publicly emitted on every frontend page via wp_localize_script, making it freely obtainable by any anonymous visitor and removing any practical barrier to exploitation.
🎖@cveNotify | 2 |
| 17 | 🚨 CVE-2026-13468
The Visualizer – Tables & Charts Manager with Built-in AI Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to access and export the contents of any visualizer chart on the site — including charts in draft, private, pending, future, or trash status — as CSV, Excel, or HTML via the /wp-json/visualizer/v1/action/{chart}/{type}/ REST endpoint. This bypass is particularly impactful because the standard WordPress REST endpoint for the non-public 'visualizer' custom post type correctly enforces capability checks and returns HTTP 401 to unauthenticated callers, whereas this plugin-registered route circumvents that protection entirely.
🎖@cveNotify | 3 |
| 18 | 🚨 CVE-2026-13443
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Lesson Attachment Title in all versions up to, and including, 3.9.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
🎖@cveNotify | 3 |
| 19 | 🚨 CVE-2026-13246
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'block_id' (and other) shortcode attributes of the 'givewp_campaign_comments' shortcode in versions up to, and including, 4.16.0. This is due to insufficient input sanitization and output escaping on user supplied attributes in CampaignCommentsShortcode::parseAttributes() and BlockRenderController::render(), where the blockId value is interpolated directly into a single-quoted HTML attribute without esc_attr(). This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
🎖@cveNotify | 4 |
| 20 | 🚨 CVE-2026-13015
The Wp Google Places Review Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'place' parameter in versions up to, and including, 18.1. This is due to insufficient input sanitization and output escaping in admin/partials/googlecrawl_dfs.php, where the $_GET['place'] value is URL-decoded, stripslashes()'d, and echoed directly into an HTML value attribute with no esc_attr() call when the supplied place is not already a stored key in the wprev_google_crawls option. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a specially crafted link.
🎖@cveNotify | 4 |
