CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-66693

    🚨 CVE-2026-66693 Subscriber Broken Access Control in Motors <= 1.4.113 versions.

  • CVE-2026-66697

    🚨 CVE-2026-66697 Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.

  • CVE-2026-66698

    🚨 CVE-2026-66698 Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.

  • CVE-2026-66700

    🚨 CVE-2026-66700 Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.

  • CVE-2026-66704

    🚨 CVE-2026-66704 Unauthenticated Server Side Request Forgery (SSRF) in Gutenverse Companion <= 2.5.1 versions.

  • CVE-2026-49820

    🚨 CVE-2026-49820 Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Probo's...

  • CVE-2026-49856

    🚨 CVE-2026-49856 @jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research. In version 0.3.1, he...

  • CVE-2026-49857

    🚨 CVE-2026-49857 auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages. Version 3.0.1 implements SSRF...

  • CVE-2026-53783

    🚨 CVE-2026-53783 rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricted shell...

  • CVE-2026-53785

    🚨 CVE-2026-53785 rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended...

  • CVE-2026-53786

    🚨 CVE-2026-53786 rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter...

  • CVE-2026-53788

    🚨 CVE-2026-53788 rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local...

  • CVE-2026-53789

    🚨 CVE-2026-53789 rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of...

  • CVE-2026-53790

    🚨 CVE-2026-53790 rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary...

  • CVE-2026-53791

    🚨 CVE-2026-53791 rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass...

  • CVE-2026-53792

    🚨 CVE-2026-53792 rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious...

  • CVE-2026-53793

    🚨 CVE-2026-53793 rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended...

  • CVE-2026-53794

    🚨 CVE-2026-53794 rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-alloc=0 to...

Статистика статей

Статьи
53,088
Просмотры
264,220
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху