Security Advisories Archive

Below are the security advisories discovered by our security researchers before 2019.

Multiple RCEs via CSRF in Dolibarr Advisory ID: HTB23302
Last Change: September 26, 2018
Vulnerable Version: 3.9.2
Risk Level: High

CSRF, Authentication Bypass & RCE in GuppY Advisory ID: HTB23299
Last Change: September 26, 2018
Vulnerable Version: 5.01
Risk Level: High

Multiple SQL Injections in Open Source Bike Share Advisory ID: HTB23271
Last Change: September 26, 2018

CVE Reference:

CVE-2015-8348

Vulnerable Version: 16.09.15
Risk Level: High

Two CSRF Vulnerabilities in Magento Advisory ID: HTB23270
Last Change: September 26, 2018

CVE Reference:

CVE-2015-7983

Vulnerable Version: 1.9.2.1
Risk Level: Medium

Arbitrary File Content Disclosure in Atutor Advisory ID: HTB23297
Last Change: August 2, 2016

CVE Reference:

CVE-2016-10400

Vulnerable Version: 2.2.1
Risk Level: Medium

SQL Injection in GLPI Advisory ID: HTB23301
Last Change: April 29, 2016
Vulnerable Version: 0.90.2
Risk Level: High

RCE via CSRF in phpMyFAQ Advisory ID: HTB23300
Last Change: April 20, 2016
Vulnerable Version: 2.8.26, 2.9.0-RC2
Risk Level: High

SQL Injection in SocialEngine Advisory ID: HTB23286
Last Change: April 6, 2016
Vulnerable Version: 4.8.9
Risk Level: High

Multiple Vulnerabilities in CubeCart Advisory ID: HTB23298
Last Change: March 30, 2016
Vulnerable Version: 6.0.10
Risk Level: Medium

Remote Code Execution via CSRF in iTop Advisory ID: HTB23293
Last Change: March 18, 2016
Vulnerable Version: 2.2.1
Risk Level: High