آخرین آسیب‌پذیری‌ها

SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()

SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()

ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass

ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass

ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMap

Unauthenticated RCE vulnerability against ClickHouse Server

Missing authentication check on POST/PUT requests

Use of default password based on serial number

Default WebUI passwords stored in plaintext

Missing brute-force protection for web interface

Dahua Intelligent Connection Center command injection

Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID

Display of information in the Forocoches comments editor

Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build

Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir

Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

Broken access control restriction in Cloud Controller API

Space Developer can extract space-scoped broker credentials

Cloud Controller exposes secrets in audit log

Credential exposure to space supporter

Apache Fineract: SQL injection vulnerability in Search API

DoS Vulnerability in UAA Related to JWKS URI Handling

Gcc: out-of-bounds read in std::from_chars

Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpoints

API permission bypass via logic bug