Статьи Support
🚨 CVE-2026-56072
Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions.
🚨 CVE-2026-56773
Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints like GET...
🚨 CVE-2026-57312
Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions.
🚨 CVE-2026-57315
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.
🚨 CVE-2026-57316
Subscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions.
🚨 CVE-2026-57317
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions.
🚨 CVE-2026-57318
Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions.
🚨 CVE-2026-57319
Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions.
🚨 CVE-2026-57321
Contributor Arbitrary File Deletion in H5P <= 1.17.7 versions.
🚨 CVE-2026-57322
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows Reflected XSS.This issue affects weMail: from n/a through 2.1.2.
🚨 CVE-2026-57323
Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions.
🚨 CVE-2026-57324
Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions.
🚨 CVE-2026-57325
Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions.
🚨 CVE-2026-57430
Contributor Broken Access Control in SEOPress PRO <= 9.1.1 versions.
🚨 CVE-2026-57431
Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions.
🚨 CVE-2026-57527
Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java object in the javax.faces.ViewState...
🚨 CVE-2026-57622
Subscriber Broken Access Control in WPCafe <= 3.0.14 versions.
🚨 CVE-2026-102870
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-70197
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-116061
A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_dealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The...
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.