{"items":[{"id":"CVE-2026-79957","published":"2026-10-14T18:01:51.493Z","updated":"2026-10-16T20:15:51.180Z","title":"ServiceNext Insecure Direct Object Reference via GetUsarios","severity":"HIGH","score":8.1,"vendor":"ServiceNext","product":"SerTec","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2026-14967","published":"2026-07-08T15:03:50.730Z","updated":"2026-07-08T15:55:55.659Z","title":"Path traversal in github_workflows allows writing artifacts outside output directory","severity":"LOW","score":3.1,"vendor":"Black Lantern Security","product":"BBOT","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2026-14966","published":"2026-07-08T15:03:47.591Z","updated":"2026-07-08T15:57:12.247Z","title":"Symlink guard bypass in unarchive module allows planting symlinks during extraction","severity":"LOW","score":3.1,"vendor":"Black Lantern Security","product":"BBOT","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2026-12568","published":"2026-06-17T21:53:47.543Z","updated":"2026-06-18T12:48:02.115Z","title":"Arbitrary File Write in postman_download module","severity":"MEDIUM","score":6.5,"vendor":"Black Lantern Security","product":"BBOT","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-12567","published":"2026-06-17T21:51:35.593Z","updated":"2026-06-18T12:50:13.202Z","title":"Symlink-following arbitrary write via github_workflows module","severity":"LOW","score":2.2,"vendor":"Black Lantern Security","product":"BBOT","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2026-12566","published":"2026-06-17T21:48:57.632Z","updated":"2026-06-18T12:50:35.439Z","title":"SSRF via unvalidated WWW-Authenticate realm in docker_pull module","severity":"LOW","score":3.1,"vendor":"Black Lantern Security","product":"BBOT","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2026-12565","published":"2026-06-17T21:45:48.232Z","updated":"2026-06-18T12:51:01.213Z","title":"Path Traversal (Zip-Slip) in unarchive module","severity":"MEDIUM","score":5.3,"vendor":"Black Lantern Security","product":"BBOT","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2026-10880","published":"2026-06-04T17:19:33.479Z","updated":"2026-06-04T18:10:36.404Z","title":"Unauthenticated SQL Injection in Osnexus Quantastor","severity":"CRITICAL","score":9.8,"vendor":"Osnexus","product":"QuantaStor","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2026-2103","published":"2026-02-06T16:22:28.282Z","updated":"2026-02-06T16:39:17.314Z","title":"Use of Hard-Coded Cryptographic Key for Password Storage","severity":"HIGH","score":7.1,"vendor":"Infor","product":"SyteLine ERP","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2025-12463","published":"2025-11-03T16:45:39.423Z","updated":"2025-11-03T20:51:37.271Z","title":"Unauthenticated SQL Injection in Guetebruck G-Cam Series Cameras","severity":"CRITICAL","score":9.8,"vendor":"Guetebruck","product":"G-Cam","kev":false,"epss":0.00555,"kevAdded":null},{"id":"CVE-2025-10284","published":"2025-10-09T15:46:14.738Z","updated":"2025-10-09T17:38:35.196Z","title":"Improper Archive Extraction in unarchive Enables RCE","severity":"CRITICAL","score":9.6,"vendor":"BLSOPS, LLC","product":"bbot","kev":false,"epss":0.00712,"kevAdded":null},{"id":"CVE-2025-10283","published":"2025-10-09T15:46:12.847Z","updated":"2025-10-09T17:39:02.243Z","title":"Improper .git Sanitization in gitdumper Enables RCE","severity":"CRITICAL","score":9.6,"vendor":"BLSOPS, LLC","product":"bbot","kev":false,"epss":0.00483,"kevAdded":null},{"id":"CVE-2025-10282","published":"2025-10-09T15:46:10.669Z","updated":"2025-10-09T19:03:04.124Z","title":"GitLab Domain Confusion in gitlab Leaks API Key","severity":"MEDIUM","score":4.7,"vendor":"BLSOPS, LLC","product":"bbot","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2025-10281","published":"2025-10-09T15:45:56.325Z","updated":"2025-10-09T19:04:36.247Z","title":"Insecure URL Handling in git_clone Leading to Leaked API Key","severity":"MEDIUM","score":4.7,"vendor":"BLSOPS, LLC","product":"bbot","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2025-10183","published":"2025-09-09T14:50:22.152Z","updated":"2025-09-09T15:14:59.774Z","title":"XML External Entity Injection in TecConnect 4.1","severity":"CRITICAL","score":9.1,"vendor":"TecCom","product":"TecConnect","kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2025-6002","published":"2025-06-11T16:26:47.283Z","updated":"2025-06-11T17:29:01.082Z","title":"VirtueMart - Unrestricted File Upload","severity":"HIGH","score":7.2,"vendor":"VirtueMart","product":"VirtueMart","kev":false,"epss":0.00823,"kevAdded":null},{"id":"CVE-2025-6001","published":"2025-06-11T16:26:25.896Z","updated":"2025-06-11T17:49:41.382Z","title":"VirtueMart - Cross Site Request Forgery (CSRF)","severity":"HIGH","score":8.3,"vendor":"VirtueMart","product":"VirtueMart","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2025-1888","published":"2025-03-14T16:11:24.455Z","updated":"2025-03-14T17:06:23.438Z","title":"Reflected Cross Site Scripting in Aperio Eslide Manager","severity":"MEDIUM","score":4.6,"vendor":"Leica BioSystems","product":"Aperio Eslide Manager","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2023-3434","published":"2023-07-14T12:29:34.563Z","updated":"2024-10-22T14:32:14.447Z","title":"QRC Handler without Input Validation in Jami","severity":"MEDIUM","score":4.4,"vendor":"Savoir-faire Linux","product":"Jami","kev":false,"epss":0.0038,"kevAdded":null},{"id":"CVE-2023-3433","published":"2023-07-14T12:28:53.363Z","updated":"2024-10-22T14:51:50.722Z","title":"Local Denial of Service in Jami","severity":"MEDIUM","score":5.5,"vendor":"Savoir-faire Linux","product":"Jami","kev":false,"epss":0.00213,"kevAdded":null}]}