Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
SQL injection in itsourcecode Online Examination System 1.0 via the Username field on index.php. No fix is listed, so restrict access and patch the query.
A memory safety bug in Firefox 143 and Thunderbird 143 showed signs of memory corruption. Mozilla fixed it in 144, so update both everywhere.
A use after free in the native messaging API on Windows affects Firefox and Thunderbird 143. Mozilla rates it moderate. Update to version 144 or later.
Firefox for Android before 144 could show the password edit screen in the app switcher. Mozilla rates it moderate, NVD 9.1. Update to Firefox 144.
SQL injection in SourceCodester Contact Manager with Export to VCF 1.0 via the contact parameter on delete. No fix is listed, so restrict access.
SQL injection in Mayuri K Employee Management System via id on the update user page. The record lists no fix, so restrict access and patch the query.
OS command injection in the end of life D-Link DAP-2695 on firmware 2.00RC131. No patch is expected, so isolate the management interface and replace it.
SQL injection in Campcodes Online Beauty Parlor Management System 1.0 via searchdata on an admin page. No fix is listed, so restrict access.
SQL injection in SourceCodester Best Salon Management System 1.0 via serv_id on the booking page. No fix is listed, so restrict access and patch the query.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
