Dario Rivas Quero

Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation

Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive

Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service

Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII

IDOR in Prospero Flow CRM allows deletion of other users' notifications

Unauthenticated self-registration in MailerUp allows access to stored email data