CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-60298

    🚨 CVE-2025-60298 Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability via the...

  • CVE-2025-60828

    🚨 CVE-2025-60828 WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface.

  • CVE-2025-60830

    🚨 CVE-2025-60830 redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key.

  • CVE-2025-61183

    🚨 CVE-2025-61183 Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar()...

  • CVE-2025-60313

    🚨 CVE-2025-60313 Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting (XSS) in the Enter URLs to check input field. This...

  • CVE-2025-60834

    🚨 CVE-2025-60834 A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a...

  • CVE-2025-60318

    🚨 CVE-2025-60318 SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the...

  • CVE-2025-57457

    🚨 CVE-2025-57457 An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary...

  • CVE-2025-61524

    🚨 CVE-2025-61524 An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and before, and...

  • CVE-2025-60311

    🚨 CVE-2025-60311 ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page

  • CVE-2025-39958

    🚨 CVE-2025-39958 In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was surprise...

  • CVE-2025-39959

    🚨 CVE-2025-39959 In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix incorrect retrival of acp_chip_info Use...

  • CVE-2025-45095

    🚨 CVE-2025-45095 Lavasoft Web Companion (also known as Ad-Aware WebCompanion) versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe...

  • CVE-2025-56683

    🚨 CVE-2025-56683 A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute...

  • CVE-2025-56426

    🚨 CVE-2025-56426 An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint...

  • CVE-2025-60265

    🚨 CVE-2025-60265 In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered...

  • CVE-2025-60302

    🚨 CVE-2025-60302 code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). When adding customer information, the client...

  • CVE-2025-61532

    🚨 CVE-2025-61532 Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on last_heard_page.php...

Статистика статей

Статьи
53,084
Просмотры
242,330
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху