Статьи Support
🚨 CVE-2026-103554
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-103558
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
🚨 CVE-2026-103565
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-59116
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
🚨 CVE-2026-61931
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-62687
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
🚨 CVE-2026-62879
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
🚨 CVE-2026-69596
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-69633
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-69634
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-69635
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
🚨 CVE-2026-69639
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-69640
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
🚨 CVE-2026-110447
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the...
🚨 CVE-2025-2707
A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown function of the file /app-api/infra/file/upload of the component Front-End Store Interface. This manipulation of the argument path causes path traversal. The attack is possible to be...
🚨 CVE-2025-2708
A vulnerability was identified in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknown function of the file /admin-api/infra/file/upload of the component Backend File Upload Interface. Such manipulation of the argument path leads to path traversal. The attack may be...
🚨 CVE-2025-10277
A vulnerability was detected in YunaiV yudao-cloud up to 2025.09. This issue affects some unknown processing of the file /crm/receivable/submit. The manipulation of the argument ID results in improper authorization. The attack can be executed remotely. The exploit is now public...
🚨 CVE-2026-5147
A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This affects an unknown part of the file /admin-api/system/tenant/get-by-website. The manipulation of the argument Website results in sql injection. It is possible to launch the attack remotely. The exploit...
🚨 CVE-2026-44859
Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these...
🚨 CVE-2026-44860
SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted...
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.