Abraxas Labs

Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handler

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems

OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields

Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs

vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking

SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch

SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()

Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP

Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php

Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration