آخرین آسیب‌پذیری‌ها

Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token

Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability

Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter

Supermicro BMC contains a SMCRAKP Fixed Key vulnerability

Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt

Supermicro BMC's syslog feature contains a command injection vulnerability

SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series

Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials

Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series

Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interf…

Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt

TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC Bypass

PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery

qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection

Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint

Payment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callback

Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key

URL prefix handling permits API key read-scope bypass in Psono Server

User-controlled Duo host permits authenticated SSRF in Psono Server

WebAuthn assertion replay permits second-factor bypass in Psono Server

File-transfer type confusion permits unauthorized repository writes in Psono Server

Device-code claim permits restricted token escalation in Psono Server

Analytics Insights <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Title

Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampere…