آخرین آسیب‌پذیری‌ها

pgAdmin 4: Server passwords are left in pgAdmin's process environment

pgAdmin 4: Connection services are not restricted in server mode

pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials

pgAdmin 4: Utility binary path can point at a shared storage directory

pgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identity

pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier

pgAdmin 4: File Manager and storage-path tools act on a different path from the one checked

pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same username

pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks

go-xrpl: ParseMPTAmountBinary: positive MPT amount silently decoded as negative (int64 wrap)

Immich: A regular user can create SharedLink for album/asset belonging to another user through CreateSharedLink API

Immich: Partner "view-only" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markers

Immich: Unauthenticated filesystem path injection (arbitrary directory write + recursive delete) in the machine-learning service

Secret Server partial login bypass

Secret Server JWT issuance error

Secret Server device validation error

Kargo: Privilege escalation via Project RBAC management in the Kargo API

PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)

MyTube: Unauthenticated Media Access via Static Routes Bypassing Login

MyTube: Visitor Can Access Hidden Video Metadata and Content

HotCRP: comment-author search exposes anonymous commenter identities

OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy

Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing

Unauthenticated Stack Buffer Overflow in Sentinel Keys Server

Stack Buffer Overflow in Sentinel Keys Server