Статьи Support
🚨 CVE-2026-22331
Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions.
🚨 CVE-2026-22332
Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.
🚨 CVE-2026-22334
Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions.
🚨 CVE-2026-22338
Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.
🚨 CVE-2026-22339
Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions.
🚨 CVE-2026-22340
Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions.
🚨 CVE-2026-22342
Unauthenticated Cross Site Request Forgery (CSRF) in WordPress Dating Theme <= 11.2.0 versions.
🚨 CVE-2026-24575
Subscriber Broken Access Control in WishList Member X <= 3.29.0 versions.
🚨 CVE-2026-24610
Subscriber Broken Access Control in MetForm Pro <= 3.9.1 versions.
🚨 CVE-2026-24611
Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions.
🚨 CVE-2026-25446
Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions.
🚨 CVE-2026-25470
Unauthenticated Remote Code Execution (RCE) in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 versions.
🚨 CVE-2026-27400
Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions.
🚨 CVE-2026-27410
Unauthenticated Deserialization of untrusted data in Slimstat Analytics < 5.4.0 versions.
🚨 CVE-2026-27429
Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions.
🚨 CVE-2026-27868
An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could obtain privilege information by using the command Version via the path...
🚨 CVE-2026-27869
An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause Denial of Service (DoS) on the web interface of the device. This issue...
🚨 CVE-2026-28575
In PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java, there is a possible memory exhaustion attack due to a logic error in the code. This could lead to local denial of service with no additional execution...
🚨 CVE-2026-28587
In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
🚨 CVE-2026-32967
Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler.
This issue affects Apache DolphinScheduler: before 3.4.2.
Users are recommended to upgrade to version 3.4.2, which fixes the issue.
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.