آخرین آسیب‌پذیری‌ها

Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code execution

Filecoin Pin: Unbounded DAG pinning can exhaust filecoin-pin server resources

Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service

Filecoin Pin: Fork bypass in the privileged GitHub Actions workflow

Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages

RAGFlow: OpenAI-compatible agent completion bypasses private canvas authorization

Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735

OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots

OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification

Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink

Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass

OpenVM's OpenVmHalo2Verifier accepts non-canonical app commitments

Pi-hole: file:// adlist read check and curl can resolve different files

SNARK Verifier: Halo 2 aggregation mishandles point-at-infinity proof elements

draw.io Desktop allows Windows executable search-path hijacking

SNARK Verifier: noncanonical accumulator limb decoding

Ladybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()

HoneySQL unchecked entity names can lead to SQL injection results

Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation

pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name

pgAdmin 4: A user's other sessions survive a change of their password

pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check

pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory

pgAdmin 4: Non-administrators can share a server with every user

pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificate