CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-61520

    🚨 CVE-2026-61520 Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a server-side request forgery...

  • CVE-2026-15750

    🚨 CVE-2026-15750 A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file...

  • CVE-2026-21840

    🚨 CVE-2026-21840 HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful system control...

  • CVE-2026-56339

    🚨 CVE-2026-56339 Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST SECURITY DEFINER...

  • CVE-2026-59254

    🚨 CVE-2026-59254 n8n before 2.28.1 contains an information disclosure vulnerability where external secrets are incorrectly resolved in workflow...

  • CVE-2026-59259

    🚨 CVE-2026-59259 n8n before versions 1.123.61, 2.27.4, and 2.28.1 contains a permission bypass vulnerability in external secrets handling caused...

  • CVE-2026-60085

    🚨 CVE-2026-60085 PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where...

  • CVE-2026-60087

    🚨 CVE-2026-60087 PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial approvals for...

  • CVE-2026-61427

    🚨 CVE-2026-61427 PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option...

  • CVE-2026-61430

    🚨 CVE-2026-61430 PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl tool that validates hostnames at...

  • CVE-2026-61433

    🚨 CVE-2026-61433 PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API...

  • CVE-2026-61435

    🚨 CVE-2026-61435 PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints...

  • CVE-2026-61436

    🚨 CVE-2026-61436 PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing unauthenticated attackers to...

  • CVE-2026-61438

    🚨 CVE-2026-61438 PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to...

  • CVE-2026-61440

    🚨 CVE-2026-61440 PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename...

  • CVE-2026-61443

    🚨 CVE-2026-61443 PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that executes scripts...

  • CVE-2026-61446

    🚨 CVE-2026-61446 PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and...

  • CVE-2026-61449

    🚨 CVE-2026-61449 Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM\Installer. The size bound introduced in 2.0.1...

Статистика статей

Статьи
53,092
Просмотры
269,975
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху