Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root....
A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve...
In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a user in one tenant, possessing sufficient privileges to invoke these APIs, to perform ope...
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could ...
Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions....
Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions....
Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions....
Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions....
Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions....
Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions....
Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions....
Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPressๆ็ดขๅผๆ่่ๅๆๆไปถ <= 2.1.3 versions....
Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions....
Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions....