آخرین آسیب‌پذیری‌ها

phpMyAdmin ShapeFile SHP File loadFromFile infinite loop

Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator

Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific co…

wlroots before 0.20.2 Out-of-Bounds Read via read_surface_class() in xwm.c

Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler

Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOIN

TeXlyre from 0.11.0 before 0.13.5 Stored XSS via Recipe Icon Import

Coolify before 4.1.1 Application Name Enumeration via Manual Webhook Endpoints

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

SolarWinds Dameware Command Injection Vulnerability

SolarWinds Dameware Buffer Overflow Vulnerability

mongorestore may restore encoded collection names into an unintended collection

SolarWinds Dameware DLL Hijacking Vulnerability

Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory

mongofiles may write outside the working directory through a symlink

mongofiles may disclose GridFS content to standard output through a stored filename

mongorestore may bypass collection guards through a system.buckets prefix

AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource

AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account

Server-side request forgery via SpatialReference string input

Password hash disclosure to "view only" admin users with custom user models

Potential exposure of private data via empty and missing Vary headers

Server-side request forgery via crs member of GeoJSON geometries

Potential log injection via unescaped geometry form values

Potential memory exhaustion in MultiPartParser via base64-encoded file upload