CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-55911

    🚨 CVE-2025-55911 An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the...

  • CVE-2025-57452

    🚨 CVE-2025-57452 In realme BackupRestore app v15.1.12_2810c08_250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows...

  • CVE-2025-55912

    🚨 CVE-2025-55912 An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in...

  • CVE-2025-57293

    🚨 CVE-2025-57293 A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930...

  • CVE-2025-55910

    🚨 CVE-2025-55910 CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php.

  • CVE-2025-57296

    🚨 CVE-2025-57296 Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes...

  • CVE-2025-52159

    🚨 CVE-2025-52159 Hardcoded credentials in default configuration of PPress 0.0.9.

  • CVE-2025-54761

    🚨 CVE-2025-54761 An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.

  • CVE-2025-54815

    🚨 CVE-2025-54815 Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.

  • CVE-2025-57396

    🚨 CVE-2025-57396 Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the...

  • CVE-2025-10854

    🚨 CVE-2025-10854 The txtai framework allows the loading of compressed tar files as embedding indices. While the validate function is intended to...

  • CVE-2025-51006

    🚨 CVE-2025-51006 Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in...

  • CVE-2025-56074

    🚨 CVE-2025-56074 A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing...

  • CVE-2025-57104

    🚨 CVE-2025-57104 Teampel 5.1.6 is vulnerable to SQL Injection in /Common/login.aspx.

  • CVE-2025-57174

    🚨 CVE-2025-57174 An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly...

  • CVE-2025-52344

    🚨 CVE-2025-52344 Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary...

  • CVE-2025-45091

    🚨 CVE-2025-45091 Seafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro are vulnerable to a stored Cross-Site Scripting (XSS) attack. An...

  • CVE-2025-56706

    🚨 CVE-2025-56706 Edimax BR-6473AX v1.0.28 was discovered to contain a remote code execution (RCE) vulnerability via the Object parameter in the...

Статистика статей

Статьи
53,084
Просмотры
241,056
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху