آخرین آسیب‌پذیری‌ها

MrDoc through 1.1.1 Broken Access Control via manage_doc_share

rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpoint

sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values

ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status

SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader

zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()

GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()

Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php

Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning

Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally

Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification c…

OTP Brute-Force Account Takeover in Idvlabs Software's Ontime

Docker Desktop logs can expose stored third-party credentials

Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, i…

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of servic…

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure.

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering.

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit migh…

User Enumeration in Rolantis Information Technologies' Agentis

TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and pa…

TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging port forwarding, an attacker ca…