آخرین آسیب‌پذیری‌ها

WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability

WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability

WordPress Simple Cloudflare Turnstile plugin <= 1.44.1 - Broken Authentication vulnerability

WordPress WP Booking System plugin <= 2.1.0.6 - Cross Site Scripting (XSS) vulnerability

WordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerability

WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerability

Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer)

WordPress Contact Form by WPForms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

WordPress WCFM Marketplace plugin <= 3.8.2 - Broken Access Control vulnerability

About Time Technologies｜Herowatch Go - Security Misconfiguration

About Time Technologies｜Herowatch Go Server - Insecure Direct Object Reference

About Time Technologies｜Herowatch Mini - Missing Authentication

Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service

sys_rand_get() silently returns an unwritten buffer when the entropy device is not ready

Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memory

Bluetooth LE Controller accepts received PDUs whose length field exceeds the configured maximum receive length, causing out-of-bounds read and write

I2S configure syscall handler passes an unvalidated user-supplied kernel object pointer to drivers

Time-of-check/time-of-use double fetch in the Zephyr i3c_transfer() syscall handler allows kernel-mode control-flow hijack from user mode

Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memory

Bluetooth Classic AVDTP session reuse re-initializes a queued work item, corrupting the system work queue

VikWidgetsLoader < 1.12.3 - Contributor+ Stored XSS via Speakers and Cookies Policy Blocks

All-in-One Video Gallery < 5.0.0 - Contributor+ Stored XSS via Shortcode Attribute

Simple Download Monitor < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure via [sdm_show_download_info] Shortcode

EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override

Stape Conversion Tracking 2.3.0 - 2.3.10 - Unauthenticated SSRF and Same-Origin XSS via Proxy Sub-Path