آخرین آسیب‌پذیری‌ها

Craft CMS stores user-provided content in session files

SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended direct…

ScreenConnect Exposure to ASP.NET ViewState Code Injection

Commvault Web Server unspecified vulnerability

Craft CMS Allows Remote Code Execution

Missing Authorization check in SAP NetWeaver (Visual Composer development server)

Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6

Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary…

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in …

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may …

Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025.

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to a…

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instance is used), as exploited in the wild in March and April 2025, aka "Unauthenti…

Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enable…

Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity:…

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the correspon…

Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE

Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass