CVE-2025-13421: High SQL Injection in itsourcecode HR Management System
CVE-2025-13421 is a SQL injection in itsourcecode HR Management System, with a public exploit and no fix listed. Check your estate and act now.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-13421 is a SQL injection in itsourcecode HR Management System, with a public exploit and no fix listed. Check your estate and act now.
CVE-2025-13420 is a SQL injection in itsourcecode HR Management System, with a public exploit and no fix listed. Check your estate and act now.
CVE-2025-13411: medium unrestricted file upload in Retro Basketball Shoes Store. Public exploit, no fix listed. Check your estate and act now.
CVE-2025-13410 is a SQL injection in Retro Basketball Shoes Store, with a public exploit and no fix listed. Check where you run it and act now.
CVE-2025-13400: high buffer overflow in Tenda CH22 Router (firmware 1.0.0.1), public exploit, no fix listed. Check where you run it and act now.
CVE-2025-13396 is a SQL injection in Courier Management System, with a public exploit and no fix listed. Review exposure and apply the steps below.
CVE-2025-13390 is a critical auth bypass in the WP Directory Kit plugin up to 1.4.4. Public exploit, no fix listed. Find your copies and act today.
CVE-2025-13357 is an insecure LDAP default in Vault Terraform Provider 4.2.0 to 5.4.0. Upgrade to v5.5.0 or set deny_null_bind to true and apply.
CVE-2025-13344 is a SQL injection in Train Station Ticketing System, with a public exploit and no fix listed. Check where you run it and act now.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.