Restez informés

Deux sections pour maintenir une veille efficace et rapide en cybersécurité. Une section de news pour avoir un aperçu des articles récents en rapport avec la cybersécurité et une section qui référence les CVE à haut score les plus récentes afin de comprendre du premier coup d'oeil ce qu'elles concernent sans avoir besoin de consulter de pages supplémentaires.

Actualité
Vulnérabilités

9.8

CVE-2026-34115 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe_amazon.php

Il y a 26 jour(s)

9.8

CVE-2026-34114 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate_text.php

Il y a 26 jour(s)

9.8

CVE-2026-34113 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech_text.php

Il y a 26 jour(s)

9.8

CVE-2026-34112 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php

Il y a 26 jour(s)

9.8

CVE-2026-34111 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.php

Il y a 26 jour(s)

9.8

CVE-2026-34110 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in complex_start.php

Il y a 26 jour(s)

9.8

CVE-2026-34109 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech.php

Il y a 26 jour(s)

9.8

CVE-2026-34108 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text.php

Il y a 26 jour(s)

9.8

CVE-2026-34107 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate.php

Il y a 26 jour(s)

9.8

CVE-2026-34106 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in subtitles.php

Il y a 26 jour(s)

9.8

CVE-2026-34105 - Guardian Language-System Unauthenticated SQL Injection via id Parameter in translate_text.php

Il y a 26 jour(s)

9.8

CVE-2026-34104 - Guardian Language-System Unauthenticated SQL Injection via name Parameter in designer.php

Il y a 26 jour(s)

9.8

CVE-2026-34103 - Guardian Language-System Unauthenticated SQL Injection via id Parameter in subtitles.php

Il y a 26 jour(s)

8.8

CVE-2026-57995 - phpMyFAQ - Privilege Escalation via Missing Self-Rights Constraint in GroupController::updatePermissions

Il y a 27 jour(s)

9.8

CVE-2026-56700 - Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection

Il y a 27 jour(s)

8.7

CVE-2026-56300 - Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functions

Il y a 27 jour(s)

8.1

CVE-2026-56286 - Capgo - Account Deletion Without Password Confirmation

Il y a 27 jour(s)

9.3

CVE-2026-56278 - Flowise - Session Hijacking via Weak Default Express Session Secret

Il y a 27 jour(s)

9.2

CVE-2026-56264 - Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint

Il y a 27 jour(s)

8.8

CVE-2026-56247 - Capgo - Privilege Escalation via Cross-Scope RBAC Role Assignment

Il y a 27 jour(s)

8.7

CVE-2026-56233 - Capgo - SSRF and Privilege Escalation via Path Traversal in Builder Upload Proxy

Il y a 27 jour(s)

8.8

CVE-2026-56230 - Capgo - Broken Object Level Authorization via x-limited-key-id Header

Il y a 27 jour(s)

8.7

CVE-2026-56219 - Capgo - Unauthenticated RBAC Bindings and Email Disclosure via get_org_user_access_rbac NULL-auth Bypass

Il y a 27 jour(s)

8.1

CVE-2025-71374 - picklescan - Arbitrary Code Execution via Undetected profile.Profile.run

Il y a 27 jour(s)

8.1

CVE-2025-71371 - picklescan - Remote Code Execution via code.InteractiveInterpreter Detection Bypass

Il y a 27 jour(s)