آخرین آسیب‌پذیری‌ها

jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC)

APT RCE via hard link reuse

ProSoft ICX35 Login Lockout Bypass via Client-Side Cookies

Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal

Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak

Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Key

FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment

FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close

FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read

FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race

FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest

FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame

FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys

FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race

FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt

FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext

FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec

FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close

FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability

FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event

FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap

SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution

Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller

Warpgate: Kubernetes authorization correlation can be reused by a recreated same-name account

SPIP before 4.4.29 Authenticated SQL Injection via where Parameter