CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-124916

    🚨 CVE-2026-124916 PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration. A...

  • CVE-2025-10248

    🚨 CVE-2025-10248 XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a malicious file...

  • CVE-2026-103906

    🚨 CVE-2026-103906 Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticated attacker to connect to the MQTT...

  • CVE-2026-104989

    🚨 CVE-2026-104989 Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote...

  • CVE-2026-112164

    🚨 CVE-2026-112164 The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an...

  • CVE-2026-112165

    🚨 CVE-2026-112165 The LaserGest mobile application disables TLS certificate and hostname verification via setServerTrustMode("nocheck"), allowing...

  • CVE-2026-114594

    🚨 CVE-2026-114594 A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard...

  • CVE-2026-115336

    🚨 CVE-2026-115336 Incorrect quota accounting in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an authenticated...

  • CVE-2026-115337

    🚨 CVE-2026-115337 Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user with certain...

  • CVE-2026-115338

    🚨 CVE-2026-115338 Insufficient protection of communications in Progress WS_FTP Server versions prior to 2025.0.5 could allow a network attacker to...

  • CVE-2026-115339

    🚨 CVE-2026-115339 Insufficient resource limits in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an...

  • CVE-2026-115340

    🚨 CVE-2026-115340 Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a...

  • CVE-2026-115341

    🚨 CVE-2026-115341 Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions prior to...

  • CVE-2026-121576

    🚨 CVE-2026-121576 Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows...

  • CVE-2026-121612

    🚨 CVE-2026-121612 Weak Authentication vulnerability in WPZOOM WPBruiser {no- Captcha anti-Spam} goodbye-captcha allows Authentication Abuse.This...

  • CVE-2026-121685

    🚨 CVE-2026-121685 FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets of hard-coded credentials. These...

  • CVE-2026-121686

    🚨 CVE-2026-121686 FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) is vulnerable to unauthenticated, remote code execution via...

  • CVE-2026-121687

    🚨 CVE-2026-121687 FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains several local interfaces that are exposed without...

Статистика статей

Статьи
53,082
Просмотры
200,099
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху