CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-65093

    🚨 CVE-2025-65093 LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL...

  • CVE-2025-12057

    🚨 CVE-2025-12057 The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate the file...

  • CVE-2025-13397

    🚨 CVE-2025-13397 A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbc_raw_realloc of the file...

  • CVE-2025-34336

    🚨 CVE-2025-34336 eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an unauthenticated file upload vulnerability...

  • CVE-2025-34337

    🚨 CVE-2025-34337 eGovFramework/egovframe-common-components versions up to and including 4.3.1 includes Web Editor image upload and related file...

  • CVE-2025-65095

    🚨 CVE-2025-65095 Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other...

  • CVE-2025-64759

    🚨 CVE-2025-64759 Homarr is an open-source dashboard. Prior to version 1.43.3, stored XSS vulnerability exists, allowing the execution of arbitrary...

  • CVE-2025-11001

    🚨 CVE-2025-11001 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

  • CVE-2025-12502

    🚨 CVE-2025-12502 The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement...

  • CVE-2025-41074

    🚨 CVE-2025-41074 Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP redirects when accessed directly. This...

  • CVE-2025-41075

    🚨 CVE-2025-41075 Vulnerability in LimeSurvey 6.13.0 in the endpoint /optin that causes infinite HTTP redirects when accessed directly. This...

  • CVE-2025-41076

    🚨 CVE-2025-41076 In version 6.13.0 of LimeSurvey, any external user can cause a 500 error in the survey system by sending a malformed session...

  • CVE-2025-62293

    🚨 CVE-2025-62293 SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project Status...

  • CVE-2025-62293

    🚨 CVE-2025-62294 SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recovery...

  • CVE-2025-62293

    🚨 CVE-2025-62295 SOPlanning is vulnerable to Stored XSS in /groupe_form endpoint. Malicious attacker with medium privileges can inject arbitrary...

  • CVE-2025-62293

    🚨 CVE-2025-62296 SOPlanning is vulnerable to Stored XSS in /taches endpoint. Malicious attacker with medium privileges can inject arbitrary HTML...

  • CVE-2025-62293

    🚨 CVE-2025-62297 SOPlanning is vulnerable to Stored XSS in /projets endpoint. Malicious attacker with medium privileges can inject arbitrary HTML...

  • CVE-2025-62293

    🚨 CVE-2025-62729 SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS...

Статистика статей

Статьи
53,082
Просмотры
213,519
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху