Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects JetEngine: from n/a ...
Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions....
Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions....
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions....
Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-controlled JSON blob into a session-shape JWT using the application's JWT_S...
Traccar Client is a GPS tracking mobile app for sending location updates to private servers using the open-source Traccar platform. In versions 9.7.19 and below, a single crafted deep link can silentl...
Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerability in Livechat files. Protected file downloads at /file-upload/:fileId/:name authorize ...
Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and prior, a high-severity Zip Slip vulnerability was identified in Streambert's subtitle ...
Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions....
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions....
Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions....
Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions....
Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions....
Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions....
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions....
Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions....
Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions....
Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions....
Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions....
Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to versio...
DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommen...
Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions....
Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions....
Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions....