Все уязвимости

Microsoft PowerShell Remote Code Execution Vulnerability

Microsoft Office Word Security Feature Bypass Vulnerability

Windows IKE Extension Spoofing Vulnerability

Microsoft PowerShell Remote Code Execution Vulnerability

Microsoft Office Word Security Feature Bypass Vulnerability

Visual Studio Code Security Feature Bypass Vulnerability

Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint

Authlib: ID token can disable its own nonce validation via the nonce_supported claim

Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

A vulnerability in the browser-based remote management interface may allow an administrator to acces

Client-supplied URI scheme trusted without transport verification in bandit

GINA Domain Switch

Remote Spark SparkView RCE

yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header

makeplane API Endpoint reliance on untrusted inputs in a security decision

AIOHTTP: Absolute-form request targets can spoof Request.scheme

UEFI Secure Boot Security Feature Bypass Vulnerability

In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`,

util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass

Gitea required Actions check bypass through skipped workflows

Reliance on Untrusted Inputs in a Security Decision in GitLab

pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID

Reliance on Untrusted Inputs in a Security Decision in hMailServer

DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing

KaTeX: Existing prototype pollution can bypass trust restrictions

Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 5.6.1p2 and 6.0.0 - 6.9.0

authentik: MFA Bypass via State Confusion / Parameter Injection in AuthenticatorEmailStage

Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invite

Genians, Inc Genian NAC/ZTNA Remote Code Execution