آخرین آسیب‌پذیری‌ها

NULL Pointer Dereference in H5HL_unprotect via Corrupted File

NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.

NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access to compute nodes outside of the current job allocation.

NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselves an Administrator.

NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution.

Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse

NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate authentication keys.

NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of their control on the compute node.

CVE-2026-121578

Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize

Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection

Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter

Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser

rsync through 3.5.1 Denial of Service via hash_search() Checksum Collisions

Silent loss of messages when merging overlapping chat exports in whatstk

Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter

Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows

NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions.

NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write a file to a path they would not normally have access to.

Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/

CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint

Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads

LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts

GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloning

AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project_id