🕵️ RESEARCH & DEEP DIVES
Supreme Court denies Trump request to allow USPS mail ballot changes — CyberScoop
SourceCodester/katojkalemba Online Food Ordering System category-foods.php sq... — CVE ThreatInt
Insufficient session expiration vulnerability in bizwell xClick allows Authen... — CVE ThreatInt
luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDi... — CVE ThreatInt
Improper input validation vulnerability in bizwell xClick allows Stored XSS. ... — CVE ThreatInt
PHPGurukul Hostel Management System checklogin.php access controlA flaw has b... — CVE ThreatInt
PHPGurukul Hostel Management System manage-students.php cross site scriptingA... — CVE ThreatInt
SourceCodester College Notes Gallery Management System login.php sql injectio... — CVE ThreatInt
Yao through v1.0.0-rc22 Missing Authorization via OpenAPI team endpointYao th... — CVE ThreatInt
Soft Serve 0.7.1 through 0.11.6 Information Disclosure via LFS LocksSoft Serv... — CVE ThreatInt
Halo through 2.26.1 Open Redirect via Unvalidated URI ParameterHalo through 2... — CVE ThreatInt
Weights & Biases wandb before 0.29.0 Path Traversal via File DownloadWeights ... — CVE ThreatInt
IceHRM before 36.0.0 Broken Access Control via Employee IDIceHRM before 36.0.... — CVE ThreatInt
Governikus AusweisApp StartPAOSResponse cross site scriptingA weakness has be... — CVE ThreatInt
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishP... — CVE ThreatInt
The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce S... — CVE ThreatInt
EFM ipTIME C200E System Setup iux_set.cgi os command injectionA vulnerability... — CVE ThreatInt
PHPGurukul Daily Expense Tracker System forgot-password.php sql injectionA vu... — CVE ThreatInt