Recent Advisories

Severity ID Title Vendor Product Date Type
Unknown ADV-8740

Omnishop <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint

CVE Details Basic Information Title Omnishop

N/A N/A NEWS
Unknown ADV-8739

Omnishop <= 1.0.9 - Cross-Site Request Forgery to Arbitrary User Deletion via /users/delete REST Endpoint

CVE Details Basic Information Title Omnishop

N/A N/A NEWS
Unknown ADV-8738

Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalation

CVE Details Basic Information Title Social Streams

N/A N/A NEWS
Unknown ADV-8737

Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow

CVE Details Basic Information Title Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow Type cve Published 2025-07-23T01:32:06.931Z Mo...

N/A N/A NEWS
Unknown ADV-8736

PCL Community Edition exposes login credentials in logs

CVE Details Basic Information Title PCL Community Edition exposes login credentials in logs Type cve Published 2025-07-23T00:11:58.870Z Modified 20...

N/A N/A NEWS
Unknown ADV-8735

HAX CMS’ application pages are vulnerable to clickjacking

CVE Details Basic Information Title HAX CMS’ application pages are vulnerable to clickjacking Type cve Published 2025-07-22T23:24:13.334Z Mod...

N/A N/A NEWS
Unknown ADV-8724

Poly Clariti Manager – Multiple Security Vulnerabilities

CVE Details Basic Information Title Poly Clariti Manager – Multiple Security Vulnerabilities Type cve Published 2025-07-22T23:05:24.070Z Modi...

N/A N/A NEWS
Unknown ADV-8721

DuraComm DP-10iN-100-MU Cross-site Scripting

CVE Details Basic Information Title DuraComm DP-10iN-100-MU Cross-site Scripting Type cve Published 2025-07-22T21:38:45.479Z Modified 2025-07-22T21...

N/A N/A NEWS
Unknown ADV-8720

DuraComm DP-10iN-100-MU Missing Authentication for Critical Function

CVE Details Basic Information Title DuraComm DP-10iN-100-MU Missing Authentication for Critical Function Type cve Published 2025-07-22T21:35:52.983...

N/A N/A NEWS
Unknown ADV-8719

Suricata’s mishandling of data on HTTP2 stream 0 can lead to resource starvation

CVE Details Basic Information Title Suricata’s mishandling of data on HTTP2 stream 0 can lead to resource starvation Type cve Published 2025-...

N/A N/A NEWS