Restez informés

Deux sections pour maintenir une veille efficace et rapide en cybersécurité. Une section de news pour avoir un aperçu des articles récents en rapport avec la cybersécurité et une section qui référence les CVE à haut score les plus récentes afin de comprendre du premier coup d'oeil ce qu'elles concernent sans avoir besoin de consulter de pages supplémentaires.

Actualité
Vulnérabilités

8.2

CVE-2026-52783 - OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.<id>.httpx_access_token" leads to Sensitive Data Exposure

Il y a 1 mois

8.8

CVE-2026-52784 - OpenProject: CSRF on TARGET through /users/:id via POST parameter "user[admin]"

Il y a 1 mois

9.9

CVE-2026-52785 - OpenProject: SQL injection in timestamps functionality

Il y a 1 mois

9.6

CVE-2026-33646 - mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)

Il y a 1 mois

8.6

CVE-2026-55441 - mise: Arbitrary command execution via task-include files in an untrusted, config-less repository

Il y a 1 mois

8.6

CVE-2026-56876 - extract-zip unvalidated symlink path traversal

Il y a 1 mois

9.9

CVE-2026-54636 - Dokku: OS Command Injection via app.json managed Cron

Il y a 1 mois

9

CVE-2026-45405 - Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add

Il y a 1 mois

9

CVE-2026-45406 - Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval

Il y a 1 mois

9

CVE-2026-45408 - Dokku: OS Command Injection via App Name in Git Pre-Receive Hook

Il y a 1 mois

8.5

CVE-2026-56663 - AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access

Il y a 1 mois

8.8

CVE-2026-57518 - Pagekit CMS 1.0.18 Privilege Escalation via UserApiController

Il y a 1 mois

9.8

CVE-2026-0685 - Server side template inject (SSTI) in Edgewall Genshi Template Engine

Il y a 1 mois

9.6

CVE-2025-11919 - Unprotected temporary directories in Wolfram Cloud may result in privilege escalation

Il y a 1 mois

8.4

CVE-2026-12411 - Broken Access Control in Canonical LXD DevLXD API

Il y a 1 mois

8.5

CVE-2026-57667 - WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability

Il y a 1 mois

8.5

CVE-2026-57663 - WordPress Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.2.7 - SQL Injection vulnerability

Il y a 1 mois

8.5

CVE-2026-57662 - WordPress Contest Gallery plugin <= 30.0.0 - SQL Injection vulnerability

Il y a 1 mois

8.8

CVE-2026-57659 - WordPress Paid Memberships Pro - Add Member From Admin plugin <= 0.7.2 - Cross Site Request Forgery (CSRF) vulnerability

Il y a 1 mois

9.1

CVE-2026-57658 - WordPress TemplateSpare plugin <= 4.2.0 - Arbitrary File Upload vulnerability

Il y a 1 mois

8.2

CVE-2026-57655 - WordPress Child theme Wizard plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Il y a 1 mois

8.6

CVE-2026-56414 - H.VIEW HV-500S6 IP Camera Unrestricted Upload of File with Dangerous Type

Il y a 1 mois

8.6

CVE-2026-55975 - H.VIEW HV-500S6 IP Camera OS Command Injection

Il y a 1 mois

9.3

CVE-2026-31928 - Daktronics Controller Firmware Use of Hard-coded Credentials

Il y a 1 mois

8.4

CVE-2026-33560 - Daktronics Controller Firmware Unrestricted Upload of File with Dangerous Type

Il y a 1 mois