آسیپ پذیری ها

CVE-2026-53576 – Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass
بیشتر بخوانید »
CVE-2026-53577 – Kestra: Cross-Execution File Read via Preview Endpoint (IDOR)
بیشتر بخوانید »
CVE-2026-52780 – OpenProject: Cache store poisoning leads to Remote Code Execution (RCE)
بیشتر بخوانید »
CVE-2026-52779 – OpenProject: Cross-project authorization bypass allows deleting public Calendar and Team Planner queries from unauthorized projects
بیشتر بخوانید »
CVE-2026-47193 – OpenProject: Journal diff endpoint bypasses object, journal, and field visibility checks
بیشتر بخوانید »
CVE-2026-52781 – OpenProject: Stored XSS on openproject.example.com through /api/v3/projects/{project}/work_packages via POST parameter “description”
بیشتر بخوانید »
CVE-2026-52782 – OpenProject: IDOR through /projects//settings/project_storages/ via PATCH parameter “storages_project_storage[project_folder_id]” leads to Access to Unauthorized Resources
بیشتر بخوانید »
CVE-2026-33646 – mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
بیشتر بخوانید »
CVE-2026-55441 – mise: Arbitrary command execution via task-include files in an untrusted, config-less repository
بیشتر بخوانید »
CVE-2026-54557 – mise HTTP backend uses raw version path for install symlink destination
بیشتر بخوانید »

صفحه قبلی صفحه بعدی