CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-60268

    🚨 CVE-2025-60268 An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking in the saveFiles...

  • CVE-2025-60838

    🚨 CVE-2025-60838 An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file.

  • CVE-2025-60880

    🚨 CVE-2025-60880 An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker...

  • CVE-2025-61577

    🚨 CVE-2025-61577 D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the...

  • CVE-2025-60266

    🚨 CVE-2025-60266 In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered...

  • CVE-2025-60304

    🚨 CVE-2025-60304 code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Subject Description field.

  • CVE-2025-60316

    🚨 CVE-2025-60316 SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter.

  • CVE-2025-60375

    🚨 CVE-2025-60375 The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient...

  • CVE-2025-60868

    🚨 CVE-2025-60868 The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip"...

  • CVE-2025-61152

    🚨 CVE-2025-61152 python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature...

  • CVE-2025-61319

    🚨 CVE-2025-61319 ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the Vulnerabilities module. When...

  • CVE-2025-60378

    🚨 CVE-2025-60378 Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices...

  • CVE-2025-60869

    🚨 CVE-2025-60869 Publii CMS v0.46.5 (build 17089) allows persistent Cross-Site Scripting (XSS) via unsanitized input in configuration fields such...

  • CVE-2025-60305

    🚨 CVE-2025-60305 SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic...

  • CVE-2025-60307

    🚨 CVE-2025-60307 code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the...

  • CVE-2025-60269

    🚨 CVE-2025-60269 JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the...

  • CVE-2025-60306

    🚨 CVE-2025-60306 code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege...

  • CVE-2025-60308

    🚨 CVE-2025-60308 code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting (XSS) vulnerability in the Add Room function...

Статистика статей

Статьи
53,084
Просмотры
242,330
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху