Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
WeGIA before 3.2.15 has an OS command injection in importar_dump.php rated 9.8. Upgrade to 3.2.15 or later and check the web root for unknown files.
DataEase before 2.10.6 can allow unauthorized access through a flaw in its TokenFilter whitelist matching. Upgrade to DataEase 2.10.6 or later.
RAGFlow 0.15.1 and earlier has SQL injection in its ExeSQL component and had no patched version at disclosure. Check releases and restrict agent access.
WeGIA before 3.2.14 has a critical SQL injection in personalizacao_upload.php. The project lists no workaround, so upgrade to 3.2.14 or later.
ruoyi-vue-pro 2.4.1 has path traversal in its back end file upload through the path argument. The vendor did not respond, so restrict the endpoint.
Qualcomm FastConnect 6800, 6900, 7800 and QCA6391 firmware has a Powerline memory corruption flaw. Apply the August 2025 fix from your device maker.
ruoyi-vue-pro 2.4.1 has path traversal in its front end file upload through the path argument. The vendor did not respond, so restrict the endpoint.
AMTT Hotel Broadband Operation System 1.0 has OS command injection in port_setup.php. The vendor did not respond, so isolate the system from the internet.
Poll Maker 5.6.5 and earlier has a blind SQL injection that needs an administrator account. Update the WordPress plugin to 5.6.6 or later and audit admins.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
