CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2024-2372

    🚨 CVE-2024-2372 The affected components accept user-supplied input for constructing redirection URLs without enforcing expected validation...

  • CVE-2025-12544

    🚨 CVE-2025-12544 The Publisher portal fails to enforce proper validation on uploaded SVG files, allowing users with the Publisher role to inject...

  • CVE-2026-117518

    🚨 CVE-2026-117518 @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. In versions up to and including...

  • CVE-2026-117531

    🚨 CVE-2026-117531 @fastify/multipart is the multipart form-data and file upload plugin for the Fastify web framework. In versions 5.3.0 through...

  • CVE-2026-117549

    🚨 CVE-2026-117549 @fastify/secure-session is a session plugin for Fastify that stores an encrypted session in a cookie. In versions 7.5.0 through...

  • CVE-2026-120213

    🚨 CVE-2026-120213 @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In versions...

  • CVE-2026-120214

    🚨 CVE-2026-120214 @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In versions...

  • CVE-2026-120215

    🚨 CVE-2026-120215 @fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that registers...

  • CVE-2026-120216

    🚨 CVE-2026-120216 fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero...

  • CVE-2026-2613

    🚨 CVE-2026-2613 The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of...

  • CVE-2024-9517

    🚨 CVE-2024-9517 The refresh token grant type in WSO2 products fails to re-validate account status before issuing new access tokens. This weakness...

  • CVE-2026-100140

    🚨 CVE-2026-100140 An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.

  • CVE-2024-12141

    🚨 CVE-2024-12141 The product fails to sufficiently validate callback URLs, allowing them to be manipulated with malicious payloads when processed...

  • CVE-2026-102801

    🚨 CVE-2026-102801 Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for...

  • CVE-2026-102802

    🚨 CVE-2026-102802 Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere...

  • CVE-2026-103419

    🚨 CVE-2026-103419 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.

  • CVE-2026-103420

    🚨 CVE-2026-103420 Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5

  • CVE-2026-105600

    🚨 CVE-2026-105600 Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5

Статистика статей

Статьи
53,092
Просмотры
277,842
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху