Все уязвимости

Apache Wicket: A cross-origin listener invocation stopped by a login wall is replayed after the user signs in

Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow

UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a

GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor

OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices

GitPython validates a submodule's ".git" path only after cloning into it (RCE)

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it

Gitea second-factor bypass through OpenID identity linking

TYPO3 CMS - Security Misconfiguration in Form Framework

Docling: Plugin entry points are imported before the allow_external_plugins check

External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration

Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode

WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability

Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or writt

(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange

Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows

Security Advisory 0160

Partition interceptor may be improperly added while sending message

Russh: Channel-scoped server callbacks can be reached without an open channel

Firewall bypass during shutdown

cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation

ads-tec Industrial IT: Account lockout via non-atomic user creation

OpenStack Horizon has Incorrect Behavior Order

OpenClaw 2026.3.11 < 2026.3.25 - Session Isolation Bypass via sessionId Resolution

Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot

Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot

OpenClaw < 2026.3.22 - Unauthorized Action Execution via Callback Dispatch

OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing