Restez informés

Deux sections pour maintenir une veille efficace et rapide en cybersécurité. Une section de news pour avoir un aperçu des articles récents en rapport avec la cybersécurité et une section qui référence les CVE à haut score les plus récentes afin de comprendre du premier coup d'oeil ce qu'elles concernent sans avoir besoin de consulter de pages supplémentaires.

Actualité
Vulnérabilités

8.1

CVE-2026-111909 - phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API

Il y a 9 jour(s)

8.7

CVE-2026-111908 - phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST API

Il y a 9 jour(s)

8.7

CVE-2026-111901 - phpMyFAQ 4.2.0-alpha before 4.2.0-beta Unauthenticated DoS via API Pagination

Il y a 9 jour(s)

8.5

CVE-2026-111893 - phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API

Il y a 9 jour(s)

8.7

CVE-2026-111884 - phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Current-Password Step-Up on E-mail Change Enables Account Takeover

Il y a 9 jour(s)

8.6

CVE-2026-111882 - phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta TOTP 2FA Bypass via SSO Callbacks

Il y a 9 jour(s)

8.3

CVE-2026-111880 - FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset

Il y a 9 jour(s)

8.1

CVE-2026-92798 - User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag

Il y a 9 jour(s)

9.8

CVE-2026-104736 - LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter

Il y a 9 jour(s)

9.1

CVE-2026-110653 - Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter

Il y a 9 jour(s)

8.1

CVE-2026-111854 - Tektronix 3 Series MDO Path Traversal Vulnerability

Il y a 9 jour(s)

8.8

CVE-2026-111853 - Tektronix 3 Series MDO OS Command Injection Vulnerability

Il y a 9 jour(s)

9.8

CVE-2026-111823 - Mage OSS OAuth Authentication Bypass Vulnerability

Il y a 10 jour(s)

8.8

CVE-2026-96627 - Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)

Il y a 10 jour(s)

8.5

CVE-2026-96626 - Arcane: Container-registry credential exfiltration via URL repoint + test to attacker host

Il y a 10 jour(s)

8.1

CVE-2026-49410 - OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation

Il y a 10 jour(s)

9.2

CVE-2026-96620 - Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

Il y a 10 jour(s)

8.1

CVE-2026-61726 - Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe content

Il y a 10 jour(s)

8.8

CVE-2026-30971 - ZoneMinder: Authenticated RCE via command injection in monitor Device Path

Il y a 10 jour(s)

9

CVE-2026-102608 - ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)

Il y a 10 jour(s)

8.8

CVE-2026-102607 - ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature

Il y a 10 jour(s)

8.8

CVE-2026-111723 - LingGuo-Drama through commit 8a6924a Broken Access Control via /admin/v1/admins API

Il y a 10 jour(s)

8.6

CVE-2026-111722 - LingGuo-Drama through commit 8a6924a IDOR via /admin/v1/projects/:id API

Il y a 10 jour(s)

8.2

CVE-2026-111719 - Roncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query

Il y a 10 jour(s)

9.8

CVE-2026-111711 - Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()

Il y a 10 jour(s)