آخرین آسیب‌پذیری‌ها

Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Key

FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment

FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close

FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read

FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race

FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest

FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame

FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys

FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race

FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt

FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext

FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec

FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close

FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability

FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event

FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap

SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution

Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller

Warpgate: Kubernetes authorization correlation can be reused by a recreated same-name account

SPIP before 4.4.29 Authenticated SQL Injection via where Parameter

Reflected XSS via client window id in URL client window mode

Git for Windows: git-credential-wincred Erase Path Heap Overflow

Git for Windows: git-credential-wincred OAuth Store Heap Overflow

Oqtane Framework before 10.3.0 SSRF via File Upload From URL

Oqtane Framework before 10.3.0 Broken Access Control via SettingController