CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-63585

    🚨 CVE-2025-63585 OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.

  • CVE-2025-63307

    🚨 CVE-2025-63307 alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The application permits user-controlled upload...

  • CVE-2025-63560

    🚨 CVE-2025-63560 An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a...

  • CVE-2025-63588

    🚨 CVE-2025-63588 An unauthenticated reflected cross-site scripting vulnerability in the query handling of CMSimpleXH allows remote attackers to...

  • CVE-2025-27916

    🚨 CVE-2025-27916 An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two...

  • CVE-2025-27917

    🚨 CVE-2025-27917 An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0...

  • CVE-2025-27918

    🚨 CVE-2025-27918 An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0...

  • CVE-2025-27919

    🚨 CVE-2025-27919 An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can...

  • CVE-2025-60541

    🚨 CVE-2025-60541 A Server-Side Request Forgery (SSRF) in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers...

  • CVE-2025-63551

    🚨 CVE-2025-63551 A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in MetInfo...

  • CVE-2025-63686

    🚨 CVE-2025-63686 There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a02b1ab208feacf3a34fc123c9381162afbaa95...

  • CVE-2025-63687

    🚨 CVE-2025-63687 An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file...

  • CVE-2025-63689

    🚨 CVE-2025-63689 Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd20a41f089298d804e43cb1c39d041e59...

  • CVE-2025-63690

    🚨 CVE-2025-63690 In pig-mesh Pig versions 3.8.2 and below, when setting up scheduled tasks in the Quartz management function under the system...

  • CVE-2025-63691

    🚨 CVE-2025-63691 In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token...

  • CVE-2025-57698

    🚨 CVE-2025-57698 AstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function install_plugin_upload of the interface...

  • CVE-2025-63784

    🚨 CVE-2025-63784 An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts...

  • CVE-2025-57697

    🚨 CVE-2025-57697 AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function _encode_image_bs64. Since the _encode_image_bs64...

Статистика статей

Статьи
53,087
Просмотры
258,367
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху