CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-73625

    🚨 CVE-2026-73625 GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be...

  • CVE-2026-73628

    🚨 CVE-2026-73628 Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route...

  • CVE-2026-73629

    🚨 CVE-2026-73629 Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipity_url_allowed() filter that fails...

  • CVE-2026-73340

    🚨 CVE-2026-73340 Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.

  • CVE-2026-73344

    🚨 CVE-2026-73344 Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

  • CVE-2026-73353

    🚨 CVE-2026-73353 Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce < 4.22.10 versions.

  • CVE-2026-73401

    🚨 CVE-2026-73401 Unauthenticated Broken Access Control in InstaWP Connect <= 0.1.3.7 versions.

  • CVE-2026-73403

    🚨 CVE-2026-73403 Unauthenticated Broken Access Control in User Registration <= 5.2.6 versions.

  • CVE-2026-70462

    🚨 CVE-2026-70462 rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers...

  • CVE-2026-70463

    🚨 CVE-2026-70463 rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only...

  • CVE-2026-73505

    🚨 CVE-2026-73505 Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle()...

  • CVE-2026-73506

    🚨 CVE-2026-73506 Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, write(s rune) in...

  • CVE-2026-73670

    🚨 CVE-2026-73670 A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject...

  • CVE-2026-72741

    🚨 CVE-2026-72741 Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated...

  • CVE-2026-73561

    🚨 CVE-2026-73561 Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming unauthenticated WebSocket...

  • CVE-2026-73562

    🚨 CVE-2026-73562 Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.10, 7.8.10, 8.24.1, and...

  • CVE-2026-73564

    🚨 CVE-2026-73564 frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec...

  • CVE-2026-73565

    🚨 CVE-2026-73565 @hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an...

Статистика статей

Статьи
53,088
Просмотры
262,891
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху