پایین
۱۴۰۵/۰۵/۰۴
VU#152953: PayRange Android app version 7.0.7 contains multiple vulnerabilities
Overview PayRange is a mobile payment app that allows users to pay for vending machines, laundromats, and other …
پایش زنده تهدیدات · ۲۴/۷
هشدارهای امنیت سایبری
آسیبپذیریها و تهدیدات روز با رتبهبندی CVSS و شدت — مستقیم از تیم تحلیل تهدیدات سیاره فناوری اطلاعات.
CRITICAL
بحرانی
HIGH
بالا
MEDIUM
متوسط
LOW
پایین
پایین
۱۴۰۵/۰۵/۰۴
VU#564823: GNU Wget enables SSRF via unvalidated FTP PASV IPs
Overview GNU Wget, versions 1.25.0 and earlier, contains a server-side request forgery (SSRF) vulnerability in its implementation of …
بالا
۱۴۰۵/۰۵/۰۴
VU#725167: node-forge Signature Forgery Vulnerabilities in RSA-PKCS and ED25519 Implementations
Overview Two distinct cryptographic signature verification vulnerabilities exist in Digital Bazaar node-forge, a widely used JavaScript library implementing …
بالا
۱۴۰۵/۰۵/۰۴
VU#529388: Privilege escalation vulnerability via unprotected IOCTL interface in Pegatron Tdelo64.sys
Overview A privilege escalation vulnerability exists in the tdeio64.sys driver due to an unprotected input/output control (IOCTL) dispatch …
بالا
۱۴۰۵/۰۵/۰۴
VU#326070: SGLang contains a vulnerable pickle deserialization vulnerability through the expert-parallel subsystem
Overview A Pickle deserialization vulnerability has been discovered within the SGLang project , enabling an attacker to perform …
بالا
۱۴۰۵/۰۵/۰۴
VU#885548: Denial-of-service vulnerability in HTTP/2 servers via stalled flow-control conditions
Overview A denial-of-service (DoS) vulnerability exists in some HTTP/2 server implementations that fail to adequately limit resource consumption …
بالا
۱۴۰۵/۰۵/۰۴
VU#762226: Plane contains multi-tenant authorization bypass vulnerability
Overview The project management tool Plane, versions 1.3.0 and earlier, contains a multi-tenant authorization bypass vulnerability in its …
بالا
۱۴۰۵/۰۵/۰۴
VU#360868: Analog Way Picturall Quad Compact Mark II contains a local privilege escalation vulnerability
Overview Version 3.5.8 of Analog Way's Picturall Quad Compact Mark II server contains a local privilege escalation vulnerability, …
بالا
۱۴۰۵/۰۵/۰۴
VU#847406: Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability
Overview Duplicati v2.3.0.1 is vulnerable to arbitrary code execution when installed outside the default C:\Program Files\Duplicati 2\ directory. …
پایین
۱۴۰۵/۰۵/۰۴
VU#492466: Logto Identity Platform has authentication and authorization failures in core protocol handling
Overview The Logto platform contains multiple vulnerabilities affecting the identity‑processing pipeline. These flaws reduce the reliability of authentication …