آخرین آسیب‌پذیری‌ها

vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking

vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases

Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects

Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification Update

Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs

phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name

phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute

phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer

OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields

OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch

OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points

n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedback

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal

Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handler

Jellyfin through 12.4 Authorization Bypass via GET /Items/Suggestions

Jellyfin through 12.4 Information Disclosure via GET /Playlists/{playlistId}

Jellyfin through 12.4 SSRF via Gzip-Compressed Data URI in SVG Profile Images

Lago through 1.55.0 Cross-Organization Invoice Payment Manipulation via Stripe Webhook

Forgejo through 15.0.11, 16.0.7, and 17.0.1 Information Disclosure via /api/v1/user/keys/{id}

Forgejo through 15.0.11, 16.0.7, and 17.0.1 Path Traversal via restore-repo

Forgejo through 15.0.11, 16.0.7, and 17.0.1 SSRF via OpenID Discovery

phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set