CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-66573

    🚨 CVE-2025-66573 Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information...

  • CVE-2025-66574

    🚨 CVE-2025-66574 TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing...

  • CVE-2025-66576

    🚨 CVE-2025-66576 Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export...

  • CVE-2025-53704

    🚨 CVE-2025-53704 The password reset mechanism for the Pivot client application is weak, and it may allow an attacker to take over the account.

  • CVE-2025-13932

    🚨 CVE-2025-13932 The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR)...

  • CVE-2025-10285

    🚨 CVE-2025-10285 The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash...

  • CVE-2025-12986

    🚨 CVE-2025-12986 When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by...

  • CVE-2025-66509

    🚨 CVE-2025-66509 LaraDashboard is an all-In-one solution to start a Laravel Application. In 2.3.0 and earlier, the password reset flow trusts the...

  • CVE-2025-13373

    🚨 CVE-2025-13373 Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an...

  • CVE-2025-14051

    🚨 CVE-2025-14051 A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the...

  • CVE-2025-66559

    🚨 CVE-2025-66559 Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its...

  • CVE-2025-66561

    🚨 CVE-2025-66561 SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting (XSS)...

  • CVE-2025-66563

    🚨 CVE-2025-66563 Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which...

  • CVE-2025-66564

    🚨 CVE-2025-66564 Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest...

  • CVE-2025-12181

    🚨 CVE-2025-12181 The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...

  • CVE-2025-12189

    🚨 CVE-2025-12189 The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is...

  • CVE-2025-12190

    🚨 CVE-2025-12190 The Image Optimizer by wps.sk plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and...

  • CVE-2025-12191

    🚨 CVE-2025-12191 The PDF Catalog for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pdfcatalog' AJAX...

Статистика статей

Статьи
53,082
Просмотры
195,627
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху