CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-61543

    🚨 CVE-2025-61543 A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2. The system uses...

  • CVE-2025-56699

    🚨 CVE-2025-56699 SQL injection vulnerability in the cmd component of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows an...

  • CVE-2025-56700

    🚨 CVE-2025-56700 Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low...

  • CVE-2025-60639

    🚨 CVE-2025-60639 Hardcoded credentials in gsigel14 ATLAS-EPIC commit f29312c (2025-05-26).

  • CVE-2025-60641

    🚨 CVE-2025-60641 The file mexcel.php in the Vfront 0.99.52 codebase contains a vulnerable call to unserialize(base64_decode($_POST['mexcel']))...

  • CVE-2025-61330

    🚨 CVE-2025-61330 A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment...

  • CVE-2025-60855

    🚨 CVE-2025-60855 Reolink Video Doorbell WiFi DB_566128M5MP_W performs insufficient validation of firmware update signatures. This allows attackers...

  • CVE-2025-61553

    🚨 CVE-2025-61553 An out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907...

  • CVE-2025-60358

    🚨 CVE-2025-60358 radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations.

  • CVE-2025-61554

    🚨 CVE-2025-61554 A divide-by-zero in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06)...

  • CVE-2025-60359

    🚨 CVE-2025-60359 radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new.

  • CVE-2025-60360

    🚨 CVE-2025-60360 radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.

  • CVE-2025-60361

    🚨 CVE-2025-60361 radare2 v5.9.8 and before contains a memory leak in the function bochs_open.

  • CVE-2025-57567

    🚨 CVE-2025-57567 A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located...

  • CVE-2025-60279

    🚨 CVE-2025-60279 A server-side request forgery (SSRF) vulnerability in Illia Cloud illia-Builder before v4.8.5 allows authenticated users to send...

  • CVE-2025-57164

    🚨 CVE-2025-57164 Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC...

  • CVE-2025-60514

    🚨 CVE-2025-60514 Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.builder.helper.ts.

  • CVE-2025-56218

    🚨 CVE-2025-56218 An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted...

Статистика статей

Статьи
53,084
Просмотры
242,330
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху