آسیپ پذیری ها

CVE-2026-54785 – gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode
بیشتر بخوانید »
CVE-2026-54768 – WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design)
بیشتر بخوانید »
CVE-2026-68770 – sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False
بیشتر بخوانید »
CVE-2026-65981 – Coturn: MOBILITY-TICKET session-resume authorization bypass allows cross-user TURN allocation takeover
بیشتر بخوانید »
CVE-2026-51785 – Hiawatha Remote Code Execution
بیشتر بخوانید »
CVE-2026-50986 – PrestaShop Totadministrativemandate Module Cross-Site Request Forgery
بیشتر بخوانید »
CVE-2026-38713 – TOTOLINK Command Injection Vulnerability
بیشتر بخوانید »
CVE-2026-53599 – Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers
بیشتر بخوانید »
CVE-2026-62999 – Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape (Incomplete fix for trust-prefix bypass)
بیشتر بخوانید »
CVE-2026-53510 – Savon::Model evaluates WSDL operation names as Ruby source
بیشتر بخوانید »

صفحه قبلی صفحه بعدی