CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-40747

    🚨 CVE-2026-40747 Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.

  • CVE-2026-40748

    🚨 CVE-2026-40748 Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.

  • CVE-2026-40749

    🚨 CVE-2026-40749 Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions.

  • CVE-2026-40755

    🚨 CVE-2026-40755 Unauthenticated PHP Object Injection in TechLink <= 1.3 versions.

  • CVE-2026-40758

    🚨 CVE-2026-40758 Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions.

  • CVE-2026-40759

    🚨 CVE-2026-40759 Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.

  • CVE-2026-40760

    🚨 CVE-2026-40760 Unauthenticated PHP Object Injection in Behold <= 1.5 versions.

  • CVE-2026-40761

    🚨 CVE-2026-40761 Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.

  • CVE-2026-40768

    🚨 CVE-2026-40768 Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions.

  • CVE-2026-41280

    🚨 CVE-2026-41280 Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized...

  • CVE-2026-42357

    🚨 CVE-2026-42357 Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have...

  • CVE-2026-45436

    🚨 CVE-2026-45436 Subscriber Broken Access Control in WPBakery Page Builder <= 8.7.2 versions.

  • CVE-2026-48783

    🚨 CVE-2026-48783 Postiz is an AI social media scheduling tool. Versions prior to 2.21.8 contained an unauthenticated endpoint that accepted a...

  • CVE-2026-48869

    🚨 CVE-2026-48869 Unauthenticated Cross Site Scripting (XSS) in Enfold <= 7.1.4 versions.

  • CVE-2026-48875

    🚨 CVE-2026-48875 Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions.

  • CVE-2026-48967

    🚨 CVE-2026-48967 Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions.

  • CVE-2026-49057

    🚨 CVE-2026-49057 Unauthenticated Broken Access Control in JobSearch <= 3.2.7 versions.

  • CVE-2026-49058

    🚨 CVE-2026-49058 Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.

Статистика статей

Статьи
53,101
Просмотры
290,437
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху