آخرین آسیب‌پذیری‌ها

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API

Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values

Matrix homeserver could redirect the chat session to a local file or network share

Request forgery via news: links

RSS feed could redirect its subscription to a local file or network share

Calendar discovery accepted local file and remote network share locations

Bypass of remote UNC path restriction in mailbox: URLs

Content of other messages could be included when replying to a crafted message

Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment

MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement

AWS API MCP Server OAuth Token Audience Validation Bypass

CVE-2026-118171

CVE-2026-118172

CVE-2026-118170

Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes

Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling

FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory

reduxjs redux-devtools Remotedev Server evalAction code injection

Homebox generic notifier SSRF via HTTP redirect after URL validation

X.Org Server XKB SetGeometry TextDoodad Double Free

Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305

Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305

Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305