CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-63513

    🚨 CVE-2025-63513 kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment...

  • CVE-2025-63829

    🚨 CVE-2025-63829 eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function.

  • CVE-2025-56643

    🚨 CVE-2025-56643 Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously...

  • CVE-2025-63514

    🚨 CVE-2025-63514 kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter.

  • CVE-2025-63694

    🚨 CVE-2025-63694 DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage.

  • CVE-2025-63695

    🚨 CVE-2025-63695 DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.

  • CVE-2025-63828

    🚨 CVE-2025-63828 Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset...

  • CVE-2025-64076

    🚨 CVE-2025-64076 Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension...

  • CVE-2025-54320

    🚨 CVE-2025-54320 In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing...

  • CVE-2025-54321

    🚨 CVE-2025-54321 In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email...

  • CVE-2025-56499

    🚨 CVE-2025-56499 Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with...

  • CVE-2025-60455

    🚨 CVE-2025-60455 Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the...

  • CVE-2025-63225

    🚨 CVE-2025-63225 The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing...

  • CVE-2025-63749

    🚨 CVE-2025-63749 pnetlab 5.3.11 is vulnerable to Command Injection via the qemu_options parameter.

  • CVE-2025-63955

    🚨 CVE-2025-63955 A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2...

  • CVE-2025-63226

    🚨 CVE-2025-63226 The Sencore SMP100 SMP Media Platform (firmware versions V4.2.160, V60.1.4, V60.1.29) is vulnerable to session hijacking due to...

  • CVE-2025-63227

    🚨 CVE-2025-63227 The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability...

  • CVE-2025-63228

    🚨 CVE-2025-63228 The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload...

Статистика статей

Статьи
53,087
Просмотры
258,367
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху