CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-53668

    🚨 CVE-2026-53668 React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open...

  • CVE-2026-53669

    🚨 CVE-2026-53669 React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in...

  • CVE-2026-55685

    🚨 CVE-2026-55685 React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated...

  • CVE-2026-59240

    🚨 CVE-2026-59240 The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `DeleteNotificationController::delete()` method at...

  • CVE-2026-61953

    🚨 CVE-2026-61953 Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.

  • CVE-2026-61957

    🚨 CVE-2026-61957 Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.

  • CVE-2026-65438

    🚨 CVE-2026-65438 Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 versions.

  • CVE-2026-65439

    🚨 CVE-2026-65439 Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=3.5.45 versions.

  • CVE-2026-65440

    🚨 CVE-2026-65440 Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions.

  • CVE-2026-65441

    🚨 CVE-2026-65441 Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.

  • CVE-2026-65442

    🚨 CVE-2026-65442 Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.

  • CVE-2026-65443

    🚨 CVE-2026-65443 Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.

  • CVE-2026-65445

    🚨 CVE-2026-65445 Unauthenticated Broken Access Control in Ad Invalid Click Protector (AICP) <= 1.3.0 versions.

  • CVE-2026-65446

    🚨 CVE-2026-65446 Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.

  • CVE-2026-66473

    🚨 CVE-2026-66473 Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.

  • CVE-2026-11756

    🚨 CVE-2026-11756 A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release...

  • CVE-2026-55977

    🚨 CVE-2026-55977 Successful exploitation of this vulnerability could allow an attacker with local network access to bypass the application's...

  • CVE-2026-9680

    🚨 CVE-2026-9680 Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via...

Статистика статей

Статьи
53,087
Просмотры
259,927
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху