آسیپ پذیری ها

CVE-2026-68502 – LazyOwn: Unauthenticated Socket.IO `input` Event Reaches LazyOwn Command Dispatcher — Unauthenticated RCE
بیشتر بخوانید »
CVE-2026-68501 – Sylius Mollie Plugin: Unauthenticated IDOR leaks order token and customer PII
بیشتر بخوانید »
CVE-2026-68500 – Sylius Mollie Plugin: Payment status forgery via the payment webhook
بیشتر بخوانید »
CVE-2026-68499 – re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)
بیشتر بخوانید »
CVE-2026-67528 – OpenProject: Improper Access Control through /api/v3/custom_options/:id via Path “id” leads to Sensitive Data Exposure
بیشتر بخوانید »
CVE-2026-67527 – OpenProject: Improper Access Control through /api/v3/work_packages/ via PATCH parameter “fileLinks”
بیشتر بخوانید »
CVE-2026-66416 – Leantime CSRF Protection Globally Disabled by Omission of Laravel VerifyCsrfToken Middleware
بیشتر بخوانید »
CVE-2026-66415 – Leantime Server-Side Request Forgery and Local File Inclusion in Blueprints::import()
بیشتر بخوانید »
CVE-2026-66066 – Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
بیشتر بخوانید »
CVE-2026-9322 – IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
بیشتر بخوانید »

صفحه قبلی صفحه بعدی