Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.4 versions....
Unauthenticated Broken Authentication in SMS Alert Order Notifications <= 3.9.3 versions....
Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalation. This issue affects JetFormBuilder: from n/a through 3.6.1....
Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.0.1 versions....
Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions....
Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions....
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions....
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions....
Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions....
Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions....
Subscriber SQL Injection in Cornerstone < 7.8.8 versions....
Unauthenticated Insecure Direct Object References (IDOR) in Clean Login <= 1.15 versions....
RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who logs in to the web consol...
Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions....
Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions....
Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget <= 4.2.3 versions....
Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions....
A path traversal in the SFTP provider (`SFTPHook.retrieve_directory` / `SFTPOperator(operation=get)`) let a malicious or compromised remote SFTP server write files outside the configured local destina...
Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions....
Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions....
Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions....
Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions....
Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions....
Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions....