آخرین آسیب‌پذیری‌ها

TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover

Refitter: C# source injection through OpenAPI header parameter names

Refitter: C# source injection through OpenAPI content-type map keys

Refitter: C# source injection through OpenAPI path keys

sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites

Aedes has Uncaught Exception and Uncontrolled Resource Consumption

Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny rules

LubeLogger: IDOR in PrintRecordStickers Allows Unauthenticated Cross-User Vehicle Record Exfiltration

OpenRemote has authenticated SQL injection in crosstab datapoint exports

netopeer2-server logging has format string vulnerability via subtree filter

uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching

uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state reset

uhttpd: HTTP request smuggling via ubus POST body parse-error desync

Refitter: Unrestricted OpenAPI references permit build-host SSRF and file inclusion

LightSAML: Signature reference wrapping permits unsigned assertion claims

Element Call exposes shared passwords in logs

ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts

LORIS has incorrect access checks in issue_tracker

LORIS has incorrect access checks in API for Imaging Browser

Fickling check_safety() bypass: dotted __qualname__ in STACK_GLOBAL resolves a class-method attribute path that evades call analysis

PDF Invoices & Packing Slips for WooCommerce 5.16.2 - 5.16.4 - Unauthenticated Stored XSS via Order Address and Customer Note Fields

Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables

Shopper: customer detail IDOR exposes administrator and staff records

Shopper: same-origin SVG and HTML uploads enable stored XSS and persistent administrator creation