آخرین آسیب‌پذیری‌ها

Saruf-Ratul HR-Payroll-Management-System chat.php cross site scripting

MD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scripting

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Servic…

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.

code-projects Simple Content Management System Admin welcome.php authorization

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P

Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode

DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow via libmpq__archive_dup

DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmpq Hash Table Lookup

llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader

llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader

llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer

llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info

llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.

Tencent RapidJSON Regex stream.h Take out-of-bounds

DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check

SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security

An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root description parsing.

SourceCodester Online Food Ordering System delete_admin.php missing authentication

SourceCodester Online Food Ordering System add_food.php unrestricted upload

Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host