Restez informés

Deux sections pour maintenir une veille efficace et rapide en cybersécurité. Une section de news pour avoir un aperçu des articles récents en rapport avec la cybersécurité et une section qui référence les CVE à haut score les plus récentes afin de comprendre du premier coup d'oeil ce qu'elles concernent sans avoir besoin de consulter de pages supplémentaires.

Actualité
Vulnérabilités

8.8

CVE-2026-53593 - FreeScout Vulnerable to Authenticated Remote Code Execution via incomplete upload extension denylist (.pht) — bypass of CVE-2025-48471

Il y a 3 mois

8.6

CVE-2026-53591 - FreeScout Vulnerable to Unauthenticated Conversation Thread Injection via HMAC Length Bypass in FetchEmails

Il y a 3 mois

9.1

CVE-2026-44231 - RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint

Il y a 3 mois

9.4

CVE-2026-16337 - dotCMS Improper Authorization and Remote Code Execution

Il y a 3 mois

8.7

CVE-2026-64619 - FileCodeBox < 2.4 Anti-bruteforce Rate Limit Bypass via Spoofed Headers

Il y a 3 mois

8.2

CVE-2026-63770 - Glance 0.8.5 IP Spoofing Authentication Brute-Force Protection Bypass

Il y a 3 mois

8.8

CVE-2026-63108 - Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing

Il y a 3 mois

10

CVE-2026-61900 - Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6

Il y a 3 mois

9.4

CVE-2026-61425 - Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0

Il y a 3 mois

10

CVE-2026-61424 - Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2

Il y a 3 mois

9.4

CVE-2026-60034 - Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0

Il y a 3 mois

9.4

CVE-2026-60032 - Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0

Il y a 3 mois

8.7

CVE-2026-60030 - Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1

Il y a 3 mois

8.8

CVE-2026-10130 - QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts

Il y a 3 mois

8.7

CVE-2026-12228 - Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms

Il y a 3 mois

9.2

CVE-2026-9323 - Insecure PRNG and Information Exposure in urwid Web Display Backend

Il y a 3 mois

10

CVE-2026-16117 - @fastify/http-proxy vulnerable to prefix escape via URL-encoded characters

Il y a 3 mois

8.8

CVE-2026-11826 - OpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master getData()

Il y a 3 mois

9.4

CVE-2025-71392 - SurrealDB before 2.2.2 SurrealQL Injection via export

Il y a 3 mois

8.5

CVE-2024-58366 - SurrealDB before 1.1.1 Format String via Scripting Functions

Il y a 3 mois

8.8

CVE-2024-58362 - SurrealDB before 1.5.5 Query Injection via RPC API

Il y a 3 mois

8.8

CVE-2023-54366 - SurrealDB before 1.0.1 Insecure Default Table Permissions

Il y a 3 mois

8.5

CVE-2026-9147 - uproot 5.7.4 and prior Code Injection via TStreamerInfo Metadata

Il y a 3 mois

8.7

CVE-2026-16158 - @fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision

Il y a 3 mois

8.7

CVE-2026-15631 - @fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal

Il y a 3 mois