آخرین آسیب‌پذیری‌ها

D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow

XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder

ken678 YznCMS Auth Group Group.php Backend privileges management

Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default

Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder

Visual Studio Spoofing Vulnerability

FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path

AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token

libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder

Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete Routes

Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions

Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name

DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter

ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock Templates

Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header

Nexterm through 1.2.2-BETA Missing Authorization in Server Session Lifecycle Routes

LearnHouse before 1.1.1 Missing Authorization via Assignment Submissions API

Pre-Auth Heap Buffer Overflow in the Multipart Request

WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page

WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages

WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing cross-site scripting

WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback

WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributes

Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter