آخرین آسیب‌پذیری‌ها

domain-admin before 1.6.79 Missing Authorization via getGroupUserList

PostfixAdmin through 4.0.5 Stored XSS via TOTP Exception Description

nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling

nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins

nnn through 5.3 OS Command Injection via togglex Plugin

dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata

ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following

Dreeve before 5.8.0 Missing Authentication in Strava Webhook POST Handler

Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers

smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation

DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save

Padloc through 4.3.0 Missing SCIM Token Validation via SCIM GET Requests

SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint

bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email Service

AB Download Manager before 1.11.2 Arbitrary File Write via /start-headless-download CSRF

CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID

Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client

An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a subsequent out-of-bounds read, potentially resu…

An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a user or an automated pipe…

An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file to a user or an automated pipeline, potentially …

A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory, potentially resulting in information disclosure or applicati…

An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file, potentially resulting in denial of service (DoS).

A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.

runZero search SQL injection

CachingWebClient shares user-specific HTTP responses across users via the shared cache tier