آخرین آسیب‌پذیری‌ها

SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server

Improper Authentication in Progress WS_FTP Server

Resource exhaustion from RPC sessions kept for requests to unknown interface

Alarm data length not validated against received frame length

Out-of-bounds read of DCP block header in DCP Set and Identify request parsing

NULL pointer dereference on implicit read of user specific record index

Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endianness

Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server

Integer underflow leads to out-of-bounds read in pf_cpm_c_data_ind()

Missing length validation of EtherType, VLAN and FrameID fields in pf_eth_recv()

NULL pointer dereference on implicit read of AR specific record index

Out-of-bounds write when parsing AR Vendor Block requests

Infinite loop when reading PDPortDataCheck record of subslot 0

Out-of-bounds write in CheckPeers block parser due to unvalidated peer station name length

Logon bypass (trust of attacker-controlled completed-methods list)

Endpoint credential minting (insecure default allow-list)

WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability

WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability

WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability

WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerability

WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerability

WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability

WordPress Sastra Essential Addons for Elementor plugin <= 1.2.3 - PHP Object Injection vulnerability

WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerability