آخرین آسیب‌پذیری‌ها

Open Redirect via Callback URL Validation in WSO2 Products Allows Phishing Attacks

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vul…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access c…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with adjacent network access could…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with adjacent network access coul…

Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt

Improper Token Renewal in Refresh Token Grant in Multiple WSO2 Products Allows Unauthorized Access to Blocked Accounts

fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses

Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing Attacks

@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape

Remote Code Execution

@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers

@fastify/secure-session vulnerable to signature verification bypass via cookie signature removal

Stored Cross-Site Scripting in Multiple WSO2 Products

@fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook

@fastify/http-proxy vulnerable to prefix escape via decoded route parameters

SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service Disruption

@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments

Information Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive Data

SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product

Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths

Reflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 Products

Memory corruption vulnerability in QMqttClient impacts Qt MQTT

Remote Code Execution Vulnerability

Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.