CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-56075

    🚨 CVE-2025-56075 A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing...

  • CVE-2025-57430

    🚨 CVE-2025-57430 Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this...

  • CVE-2025-57432

    🚨 CVE-2025-57432 Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service...

  • CVE-2025-57433

    🚨 CVE-2025-57433 The 2wcom IP-4c 2.15.5 device's web interface includes an information disclosure vulnerability. By sending a crafted POST request...

  • CVE-2025-57601

    🚨 CVE-2025-57601 AiKaan Cloud Controller uses a single hardcoded SSH private key and the username `proxyuser` for remote terminal access to all...

  • CVE-2025-57605

    🚨 CVE-2025-57605 Lack of server-side authorisation on department admin assignment APIs in AiKaan IoT Platform allows authenticated users to...

  • CVE-2025-57682

    🚨 CVE-2025-57682 Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary files from...

  • CVE-2025-57431

    🚨 CVE-2025-57431 The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious...

  • CVE-2025-57434

    🚨 CVE-2025-57434 Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation. The system...

  • CVE-2025-43953

    🚨 CVE-2025-43953 In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute...

  • CVE-2025-55885

    🚨 CVE-2025-55885 SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to...

  • CVE-2025-55886

    🚨 CVE-2025-55886 An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD. The flaw exists in the `fe_uid` parameter of the...

  • CVE-2025-57437

    🚨 CVE-2025-57437 The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port...

  • CVE-2025-57438

    🚨 CVE-2025-57438 The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability. Certain sensitive endpoints are intended to be...

  • CVE-2025-57439

    🚨 CVE-2025-57439 Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability accessible via the edit.php endpoint. An...

  • CVE-2025-57440

    🚨 CVE-2025-57440 The Blackmagic ATEM Mini Pro 2.7 exposes an undocumented Telnet service on TCP port 9993, which accepts unauthenticated plaintext...

  • CVE-2025-55887

    🚨 CVE-2025-55887 Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the...

  • CVE-2025-57685

    🚨 CVE-2025-57685 The LB-Link routers, including the BL-AC2100_AZ3 V1.0.4, BL-WR4000 v2.5.0, BL-WR9000_AE4 v2.4.9, BL-AC1900_AZ2 v1.0.2, BL-X26_AC8...

Статистика статей

Статьи
53,084
Просмотры
241,056
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху