آخرین آسیب‌پذیری‌ها

Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping

frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses

The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g., reading secret_key_base) because the ImageMagick analyzer runs whe…

Sender WordPress Plugin < 2.11.3 Broken Access Control via admin_post_sender_debug_download

Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto

wePOS before 2.0.3 Missing Authorization via payment/process Endpoint

Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgery

Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761)

Security Misconfiguration Vulnerability in Tata Motors iRA and iRA.ev mobile application

Information Disclosure Vulnerability in Tata Motors iRA and iRA.ev mobile application

CoopCycle coopcycle-web 5.6.0 before 6.20.0 Missing Zelty Webhook Signature Verification

Insecure Configuration Vulnerability in Tata Motors iRA and iRA.ev mobile application

Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control

zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 CRLF Header Injection via Message Builders

CoopCycle coopcycle-web before 6.20.1 IDOR via Incident Resource and Action Endpoint

sngrep through 1.9.0 Infinite Loop DoS via Crafted NFLOG TLV

Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet

ZBar through 0.23.95 Out-of-Bounds Read via _zbar_sq_decode() in sqcode.c

libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysex

Stonewuu ai-fusion-video before 1.3.0 IDOR via Project, Asset and Script Controllers

Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking

langchain4j-aideepin before 3.31.0 IDOR via GET /character/{uuid}

loonflow before r3.2.3 IDOR via ticket_flow_history Endpoint

easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API

Hardcoded Credentials Vulnerability in Tata Motors iRA and iRA.ev mobile application