آخرین آسیب‌پذیری‌ها

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a malic…

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

Plex Media Server arbitrary file write

Plex Media Server arbitrary-host SSRF

Plex Media Server URL injection

Plex Media Server SSRF

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and th…

BIG-IP APM OAuth vulnerability

Directory Traversal and File upload allows execution of arbitrary script on the Management Server

Security Advisory 0183

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before…

Cisco Identity Services Engine Authentication Bypass Vulnerability

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User inter…

Cisco Secure Email Gateway SQL Injection Vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

Improper Certificate Validation in Quantum Security Gateway

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions

Windows Update Stack Elevation of Privilege Vulnerability

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

pre-authentication remote code execution

SSH session privilege manipulation via a crafted username in Mikrotik RouterOS

SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS