Статьи Support
🚨 CVE-2026-101174
DoS vulnerability in the DSoftBus module.
Impact: Successful exploitation of this vulnerability may affect availability.
🚨 CVE-2026-101175
Null pointer dereference vulnerability in the ArkWeb module.
Impact: Successful exploitation of this vulnerability may affect availability.
🚨 CVE-2026-101176
Permission control vulnerability in the event notification management module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
🚨 CVE-2026-101177
Permission control vulnerability in the Optimizer module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
🚨 CVE-2026-101179
Buffer overflow vulnerability in the file preview module.
Impact: Successful exploitation of this vulnerability may affect availability.
🚨 CVE-2026-101180
DoS vulnerability in the file parsing module.
Impact: Successful exploitation of this vulnerability may affect availability.
🚨 CVE-2026-101181
Permission control vulnerability in the WLAN module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
🚨 CVE-2026-101182
Race condition vulnerability in the location service module.
Impact: Successful exploitation of this vulnerability may affect availability.
🚨 CVE-2026-101183
UAF vulnerability in the location service module.
Impact: Successful exploitation of this vulnerability may affect availability.
🚨 CVE-2026-101185
OOB read vulnerability in the peripheral module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
🚨 CVE-2026-101186
DoS vulnerability in the window module.
Impact: Successful exploitation of this vulnerability may affect availability.
🚨 CVE-2026-101178
Permission control vulnerability in the autofill service module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
🚨 CVE-2026-101184
Permission control vulnerability in the Bluetooth module.
Impact: Successful exploitation of this vulnerability may affect availability.
🚨 CVE-2026-18199
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.
🚨 CVE-2026-107457
A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.
🚨 CVE-2024-7075
The user search function within the management console fails to properly encode user-supplied input before rendering it in the browser. This allows an attacker to inject malicious scripts that are then executed by the user's browser in the context of the management console...
🚨 CVE-2025-13647
The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header.
Successful exploitation can lead to the...
🚨 CVE-2026-118871
SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in.
🚨 CVE-2026-8923
Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option.
🚨 CVE-2026-111560
Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value...
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.