Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Gets

#14372of 60,596
22.1Total CVSS
Vulnerabilities · 3
Medium
1
High
2
PT-2026-1550
2026-01-07
5.8
CVE-2026-0649
Unknown
Invoice Ninja
A security issue exists in invoiceninja. The issue involves server-side request forgery (SSRF) stemming from manipulation of the `company logo` argument within the `copy` function of the `/app/Jobs/Util/Import.php` file, part of the Migration Import component. This allows for remote exploitation. The details of the issue have been publicly disclosed.
PT-2026-1039
2026-01-02
7.5
CVE-2025-15422
Empiresoft
Empirecms
A security issue exists in EmpireSoft EmpireCMS related to the IP Address Handler component. The issue resides in the `egetip` function within the `e/class/connect.php` file. This flaw results in a failure of protection mechanisms. The attack can be initiated remotely. The exploit for this issue has been published. The vendor was notified but did not respond.
PT-2026-1042
2026-01-02
8.8
CVE-2025-15423
Empiresoft
Empirecms
A flaw exists in EmpireSoft EmpireCMS that allows for unrestricted file uploads. This issue is located in the `CheckSaveTranFiletype` function within the `e/class/connect.php` file. Successful exploitation may occur remotely. The details of the issue have been publicly disclosed. The vendor was informed of this disclosure but did not provide a response.