آخرین آسیب‌پذیری‌ها

WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection

Hangzhou Xiongmai Technology P2PAPI.dll P2P SDK P2PAPI_Connect buffer overflow

HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI

Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal

Oray Pugongying X5 Pro API Authorization run_async_task improper authorization

Oray Pugongying X5 Pro Session ID session.lua session_get random values

Gitea limited-visibility profile disclosure with public-only tokens

Gitea user and organization feed token scope bypass

Gitea private pull request disclosure on project boards

Gitea public-only token bypass on bulk organization repository deletion

Gitea issue changes on archived repositories through the API

Gitea public-only token bypass in repository and organization creation

Gitea OAuth2 userinfo private group disclosure to public-only tokens

Gitea public-only package token access to private OCI blobs

Gitea Helm chart upload decompression denial of service

Gitea private issue disclosure through issue dependency timeline events

Gitea private repository listing to public-only tokens on profiles

Gitea admin API public-only token scope bypass

Gitea Actions job token spoofing of instance-signed commits

Gitea archived repository release, milestone and label modification

Gitea public-only token bypass through Actions runner registration

Gitea contribution heatmap private activity disclosure to public-only tokens

Gitea stored XSS through legacy Actions artifact Content-Encoding

Gitea Actions task token private repository enumeration

Gitea OAuth2 account auto-linking takeover through the sign-up form