Статьи Support
🚨 CVE-2026-53878
An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16.
`DomainNameValidator` does not prohibit newlines in domain names (unless used via a form field, since `CharField` strips newlines). If an application uses values with newlines in an HTTP response, header...
🚨 CVE-2026-59709
Ghostfolio's PUT /api/v1/portfolio/holding/:dataSource/:symbol/tags endpoint fails to verify Access.permissions field when processing the Impersonation-Id header, allowing read-only access grantees to modify portfolio holding tags. Attackers with valid read-only share tokens can...
🚨 CVE-2026-56811
Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoenix.Socket module) allows an unauthenticated attacker to cause a denial of service against any endpoint that mounts a Phoenix socket with a reachable channel transport (WebSocket...
🚨 CVE-2026-56812
Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Presence JavaScript client) allows an attacker with ordinary channel access to cause a persistent client-side denial of service against every viewer of a presence channel topic.
This...
🚨 CVE-2026-13020
A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote, unauthorized attacker may assume ownership of a user’s account by manipulating this mechanism. ArcGIS Administrators...
🚨 CVE-2026-14904
AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create and manage secure virtual desktops and computing resources on AWS.
Improper link resolution before file access issue (CWE-59) in the Auth.GetUserPrivateKey...
🚨 CVE-2026-23697
Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php...
🚨 CVE-2026-23698
Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which...
🚨 CVE-2026-57851
MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without...
🚨 CVE-2026-48947
An improper access check allows privileged users to overwrite media files without editing permissions.
🚨 CVE-2026-48948
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
🚨 CVE-2026-48949
Lack of validation leads to an XSS vulnerability in the MFA management views.
🚨 CVE-2026-48950
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
🚨 CVE-2026-48951
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
🚨 CVE-2026-48952
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
🚨 CVE-2026-48953
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
🚨 CVE-2026-48954
Improper validation leads to a generic XSS vector in the language override feature.
🚨 CVE-2026-48955
An improper access check allows unauthorized users to access workflow stage and transition information.
🚨 CVE-2026-48956
An improper access check allows users to display a list of modules in the frontend.
🚨 CVE-2026-48957
An improper access check allows unauthorized users to access com_privacy datasets.
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.