CVE-2023-28310

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:37+00:00| seen| https://t.me/PositiveTechnologies/1603 2026-07-27 00:01:28+00:00| seen| https://t.me/PositiveTechnologies/1603 2026-07-28 19:00:05+00:00| seen| https://t.me/PositiveTechnologies/1603 2026-07-29 00:00:28+00:00| seen|...

CVE-2023-22815

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:24+00:00| seen| https://t.me/PositiveTechnologies/1798 2026-07-27 00:01:28+00:00| seen| https://t.me/PositiveTechnologies/1798 2026-07-28 19:00:05+00:00| seen| https://t.me/PositiveTechnologies/1798 2026-07-29 00:00:28+00:00| seen|...

CVE-2023-36011

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:23+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-27 00:01:26+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-28 18:00:06+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-29 00:00:29+00:00| seen|...

CVE-2023-35632

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:23+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-27 00:01:26+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-28 18:00:06+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-29 00:00:30+00:00| seen|...

CVE-2004-2761

creationtimestamp| type| source ---|---|--- 2026-07-17 05:00:09+00:00| seen| https://t.me/PositiveTechnologies/355 2026-07-18 00:00:33+00:00| seen| https://t.me/PositiveTechnologies/355...

MobSF Local Privilege Escalation

Product: Mobile Security Framework MobSFVersion: 4.3.0CWE-ID: CWE-269: Improper Privilege ManagementCVSS vector v.4.0: 7.1 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:NCVSS vector v.3.1: 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NDescription: MobSF has a functionality of dividing users by...

PT-2026-14: Integer underflow leads to Remote Code Execution in Yokogawa Centum VP

The vulnerability was identified in Centum VP, versions R1.07.00 or earlier. The discovered vulnerability allows an attacker to achieve remote code execution via an integer underflow that lets malicious input manipulate internal calculations and trigger execution of the code. Vulnerability status...

PT-2025-41: The Twinkly Light Tree 3D firmware uses a vulnerable Blufi library

The vulnerability was identified in the Twinkly Light Tree 3D firmware, 2.8.18. An attacker within Bluetooth range, with physical access to a device running firmware prior to 2.9.0 and provisioning mode manually re-enabled could, in an attack scenario, interfere with the provisioning exchange and...

CVE-2021-4467

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

CVE-2021-4467 Positive Technologies MaxPatrol 8 & XSpider Remote DoS

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

CVE-2021-4467

CVE-2021-4467 affects Positive Technologies MaxPatrol 8 and XSpider, where the client communication service listening on TCP port 2002 accepts new session IDs per connection without adequately throttling concurrent requests. An unauthenticated attacker could issue repeated HTTPS requests to cause...

CVE-2021-4467: Uncontrolled Resource Consumption

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

Statistics on 2024 trending vulnerabilities were featured in the OIC-CERT annual report

Statistics on2024 trending vulnerabilitieswere featured in the OIC-CERT annual report. The Organisation of Islamic Cooperation OIC is the largest and most influential official intergovernmental Muslim international organization. It currently unites 57 countries with a population of about 2 billio...

PT-2025-113: Stored XSS in FreeScout

The vulnerability was identified in FreeScout , versions 1.8.182. The discovered vulnerability allows an attacker to embed malicious HTML and JavaScript into content generated by FreeScout, causing script execution in the user’s browser. Vulnerability status: Confirmed by vendor Date of...

PT-2025-99: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize untrusted data, manipulate objects and impair system functionality. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 19.07.2025 Recommendation...

PT-2025-102: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize unsafe data, gain control over application objects and impair its operation. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 19.07.2025...

PT-2025-96: Deserialization of untrusted data leads to Remote code execution (RCE) in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize arbitrary objects and fully control their properties, leading to total compromise of the web‑application logic and remote code execution RCE. Vulnerability status:...

PT-2025-103: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize data, instantiate arbitrary objects and alter their properties, causing severe disruption of the system. Vulnerability status: Confirmed by vendor Date of vulnerability...

PT-2025-105: Deserialization of untrusted data leads to Remote code execution (RCE) in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize tampered data, create objects of arbitrary classes and manipulate their properties, resulting in remote code execution. Vulnerability status: Confirmed by vendor Date of...

Laravel Translation Manager Vulnerable to Stored Cross-site Scripting

Impact The application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data. An attacker can inject arbitrary HTML code, including JavaScript scripts, into the page processed by the user's browser, allowing them to steal sensitive...