آخرین آسیب‌پذیری‌ها

psqlODBC does not escape a server-supplied column name in its updatable-cursor queries

psqlODBC does not validate column numbers and row indexes in binding and descriptor functions

psqlODBC stack buffer overflow when quoting long schema and table names

psqlODBC SQL injection through SQLSpecialColumns table and schema names

psqlODBC ODBC escape parser stack buffer overflow

psqlODBC does not validate server-supplied counts and lengths

psqlODBC uses a server-supplied column name as a format string

psqlODBC row cache overflow when a later FETCH changes the column count

psqlODBC large-object read overflows the application buffer

Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials

Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8

Munshi XSS via Purchase Inquiry Thread Rendering

Munshi IDOR via Purchase Inquiry Thread Endpoint

Munshi Missing Authorization in Company Deletion API

Munshi Broken Object Level Authorization via Invoice Deletion API

Munshi Payment Bypass via Unauthenticated Webhook Endpoint

CVE-2026-120656

Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3

Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3

Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir

AndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgery

FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes

Template injection in the publishing component of awslabs Virtual Engineering Workbench