Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Realce Queue Ticket Kiosk up to 20250517 has a medium severity unrestricted upload in ajax.php. No fix is confirmed, so limit access and check uploads.
Realce Queue Ticket Kiosk up to 20250517 has a high severity SQL injection on the admin login. No fix is confirmed, so take the admin page offline.
Econtrata up to 20250516 has a high severity SQL injection in its /valida endpoint. The vendor did not respond and no fix is confirmed, so limit access.
llisoft MTA Maita Training System 4.5 has a medium severity unrestricted upload in OpenController. No fix is confirmed, so limit access to it.
llisoft MTA Maita Training System 4.5 has a medium severity SQL injection in AdminShitiController. No fix is confirmed, so limit access to the app.
H3C SecCenter SMP-E1114P02 up to 20250513 has a medium severity unrestricted upload in importFile. No fix is confirmed, so limit access to it.
H3C GR-5400AX firmware up to 100R008 has a high severity buffer overflow in EditWlanMacList. No fix is confirmed, so limit management access and ask H3C.
TOTOLINK A7000R firmware 9.1.0u.6115_B20201022 has a critical login bypass at formLoginAuth.htm. No fix is confirmed, so cut remote access first.
TOTOLINK EX1200T firmware 4.1.2cu.5215 has a critical login bypass at formLoginAuth.htm. No fix is confirmed, so cut remote access and check the vendor.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
