آخرین آسیب‌پذیری‌ها

Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands

PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents

PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header

PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route

Grimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadata

abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name

SonicJS through 3.0.0 Missing Authorization in Content Write API

LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization

SerpBear before 3.1.1 Missing Authentication via POST /api/notify

Bastille through 1.4.4 Jail Escape via Symlink Following in cp, rcp, jcp

xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header

WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation

WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations

WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations

WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS

Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Memory Access via SVM Import Plugin

Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking

Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via Micrografx Draw Import

Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Overflow via TIFF Tile Buffer Handling

Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data

Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader

Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via PSD Image Loader

WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability

WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability

WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability