آخرین آسیب‌پذیری‌ها

Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group Parsing

Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments

SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value Serialization

SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass

SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypass

SurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition Addresses

SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject Collision

SurrealDB 3.1.0 before 3.3.0 Incorrect Authorization via Streaming Index Planner

SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV Backends

SurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style Invocations

Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 Field Corruption via Null Dot Notation Key

Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Update

Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 Session Permission Bypass via upgradeToRevocableSession

FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly

FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry

FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2

FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token

FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel

FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel

FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload

FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control

FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA

FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP

FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics

FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet