Advisory Catalog

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Adobe ColdFusion Path Traversal Vulnerability

Joomlack Page Builder Improper Access Control Vulnerability

Kestra OSS OS Command Injection Vulnerability

iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

PTC Windchill and FlexPLM Improper Input Validation Vulnerability

SimpleHelp Authentication Bypass Vulnerability

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Splunk Enterprise Missing Authentication for Critical Function Vulnerability

Fortinet FortiSandbox OS Command Injection Vulnerability

Ivanti Sentry OS Command Injection Vulnerability

Check Point Security Gateway Improper Authentication Vulnerability

Widget Factory Joomla Content Editor Improper Access Control Vulnerability

Progress LoadMaster Command Injection Vulnerability

Oracle E-Business Suite Improper Privilege Management Vulnerability

Nx Console Embedded Malicious Code Vulnerability

Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability

Ubiquiti UniFi OS Improper Input Validation Vulnerability

Ubiquiti UniFi OS Path Traversal Vulnerability

Ubiquiti UniFi OS Improper Access Control Vulnerability

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

Drupal Core has a SQL Injection issue

Daemon Tools Lite Embedded Malicious Code Vulnerability

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

LiteLLM has SQL Injection in Proxy API key verification

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

Fortinet FortiSandbox OS Command Injection Vulnerability

Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

Fortinet FortiClient EMS Improper Access Control Vulnerability

Aquasecurity Trivy Embedded Malicious Code Vulnerability

Citrix NetScaler Out-of-Bounds Read Vulnerability

Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint

Lantronix EDS5000 Code Injection Vulnerability

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

Fortinet FortiClient EMS SQL Injection Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

SolarWinds Web Help Desk Security Control Bypass Vulnerability

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability