آخرین آسیب‌پذیری‌ها

InfiniFlow RAGFlow Seafile Connector seafile_connector.py _account_get server-side request forgery

Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References

BIG-HKSCS decoding hang on crafted input

yezhihao jt808-server Web Management API WebMvcConfig.addInterceptors missing authentication

GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass

GetPaid WordPress Plugin < 2.8.63 Authorization Bypass via maybe_use_invoice

GetPaid WordPress Plugin < 2.8.63 Incorrect Authorization via REST API

Cisco Identity Services Engine Authorization Bypass Vulnerability

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

Cisco Unified Computing System Central Remote Code Execution Vulnerability

jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC)

APT RCE via hard link reuse

ProSoft ICX35 Login Lockout Bypass via Client-Side Cookies

Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal

Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak

Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Key

FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment

FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close

FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read

FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race

FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest

FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame

FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys

FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race

FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt