CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-105297

    🚨 CVE-2026-105297 Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own...

  • CVE-2026-105298

    🚨 CVE-2026-105298 Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header...

  • CVE-2026-109395

    🚨 CVE-2026-109395 Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based...

  • CVE-2026-109440

    🚨 CVE-2026-109440 LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell...

  • CVE-2026-109441

    🚨 CVE-2026-109441 LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on...

  • CVE-2026-109442

    🚨 CVE-2026-109442 piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and...

  • CVE-2026-109443

    🚨 CVE-2026-109443 JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system...

  • CVE-2026-109444

    🚨 CVE-2026-109444 OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run...

  • CVE-2026-75128

    🚨 CVE-2026-75128 Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without...

  • CVE-2026-77926

    🚨 CVE-2026-77926 Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system...

  • CVE-2026-77930

    🚨 CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by...

  • CVE-2026-77934

    🚨 CVE-2026-77934 Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by...

  • CVE-2026-77935

    🚨 CVE-2026-77935 Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated...

  • CVE-2026-77936

    🚨 CVE-2026-77936 Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and...

  • CVE-2026-77937

    🚨 CVE-2026-77937 Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by...

  • CVE-2026-102438

    🚨 CVE-2026-102438 An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM...

  • CVE-2026-105299

    🚨 CVE-2026-105299 Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through...

  • CVE-2026-17518

    🚨 CVE-2026-17518 Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device...

Статистика статей

Статьи
53,084
Просмотры
241,644
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху