CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-26210

    🚨 CVE-2025-26210 DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com...

  • CVE-2025-56608

    🚨 CVE-2025-56608 The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in...

  • CVE-2025-57052

    🚨 CVE-2025-57052 cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c...

  • CVE-2025-57146

    🚨 CVE-2025-57146 phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno...

  • CVE-2025-57147

    🚨 CVE-2025-57147 A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack of input...

  • CVE-2025-57148

    🚨 CVE-2025-57148 phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of...

  • CVE-2025-57149

    🚨 CVE-2025-57149 phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter.

  • CVE-2025-57150

    🚨 CVE-2025-57150 phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/subcategory.php via the...

  • CVE-2025-57151

    🚨 CVE-2025-57151 phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the fullname...

  • CVE-2025-55852

    🚨 CVE-2025-55852 Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security_5g.

  • CVE-2025-55944

    🚨 CVE-2025-55944 Slink v1.4.9 allows stored cross-site scripting (XSS) via crafted SVG uploads. When a user views the shared image in a new...

  • CVE-2025-56498

    🚨 CVE-2025-56498 An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface. The...

  • CVE-2025-56689

    🚨 CVE-2025-56689 One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password...

  • CVE-2025-56760

    🚨 CVE-2025-56760 When Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing...

  • CVE-2025-56761

    🚨 CVE-2025-56761 Memos 0.22 is vulnerable to Stored Cross site scripting (XSS) vulnerabilities by the upload attachment and user avatar features...

  • CVE-2025-45805

    🚨 CVE-2025-45805 In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into...

  • CVE-2025-52494

    🚨 CVE-2025-52494 Adacore Ada Web Server (AWS) before 25.2 is vulnerable to a denial-of-service (DoS) condition due to improper handling of SSL...

  • CVE-2025-56752

    🚨 CVE-2025-56752 A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass...

Статистика статей

Статьи
53,082
Просмотры
221,331
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху