آخرین آسیب‌پذیری‌ها

User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own

Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode

NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full

Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation

Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor

Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex

Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.php

Chainlit 2.12.0 SSRF via Semicolon Path Segment in MCP allowed_urls

Wing FTP Server before 8.2.6 Stored XSS via nowpath in Legacy Activity Page

Outline before 1.12.0 Incorrect Authorization via authorizeDocumentPublish() Detached Draft

LaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block Content

LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core Upgrades

Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch

Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker Controllers

python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key

Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser

libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder

L-SMASH through 2.14.5 Heap Out-of-Bounds Write via hdlr and url Boxes

rapidyaml through 0.16.0 Out-of-Bounds Write via ParseEngine::_add_annotation()

The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression

The Sleuth Kit through 4.15.0 Heap Out-of-Bounds Read via HFS+ decmpfs Header

libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversion

libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver

LaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email Tool

Outline before 1.12.0 Improper Access Control via Public Document Shares