Vulnerability Disclosure

CVE-2025-48045, CVE-2025-48046, CVE-2025-48047: MICI NetFax Server Product Vulnerabilities (NOT FIXED)

Anna Katarina Quinn

Multiple vulnerabilities in SonicWall SMA 100 series (FIXED)

Xerox Versalink C7025 Multifunction Printer: Pass-Back Attack Vulnerabilities (FIXED)

CVE-2025-1094: PostgreSQL psql SQL injection (FIXED)

Lorex 2K Indoor Wi-Fi Security Camera: Multiple Vulnerabilities (FIXED)

Multiple Vulnerabilities in Wowza Streaming Engine (Fixed)

CVE-2024-45195: Apache OFBiz Unauthenticated Remote Code Execution (Fixed)

CVE-2024-6922: Automation Anywhere Automation 360 Server-Side Request Forgery

CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)

CVE-2023-47218: QNAP QTS and QuTS Hero Unauthenticated Command Injection (FIXED)

CVE-2023-5950 Rapid7 Velociraptor Reflected XSS

Multiple Vulnerabilities in South River Technologies Titan MFT and Titan SFTP [FIXED]

CVE-2023-4528: Java Deserialization Vulnerability in JSCAPE MFT (Fixed)

CVE-2023-35082 - MobileIron Core Unauthenticated API Access Vulnerability

CVE-2023-38205: Adobe ColdFusion Access Control Bypass [FIXED]

CVE-2023-29298: Adobe ColdFusion Access Control Bypass

Multiple Vulnerabilities in Fortra Globalscape EFT Administration Server [FIXED]

Raptor Technologies Volunteer Management Client-Side Security Controls (FIXED)

Multiple Vulnerabilities in Rocket Software UniRPC server (Fixed)

CVE-2023-0391: MGT-COMMERCE CloudPanel Shared Certificate Vulnerability and Weak Installation Procedures