آخرین آسیب‌پذیری‌ها

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device.

Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal

A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device.

A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information about the host device.

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious fi…

An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious f…

A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a buffer overflow. An attacker can provide a malicious file to…

A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a ma…

A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file…

A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide …

joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service

Nomad allocation data migration may allow host directory permission modification via symlink following

Nomad dispatch payload writes can escape the allocation directory through symlinks

Nomad vulnerable to cross-namespace information disclosure in multiple endpoints

socket.getaddrinfo() accepts embedded null bytes in host and port

Botan: Integer overflow when reporting block size in FFI can cause memory corruption

Botan: CLI utility `ocsp_check` accepts unauthenticated responses

Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs

Botan: Online OCSP redirects enable blind requests to internal HTTP services

Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state

minimatch: potential denial of service via globparts amplification

@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location

Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path

Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0