VulnCheck

OPNsense < 26.1.9 Stored XSS via Firewall Rule Description Field

Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation

Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset

Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript

Johnson Controls Inc. TL280

FirmaCheck < 1.3.16 DLL Hijacking via Unvalidated OpenSSL Configuration Path

Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly

AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()

SuperPlane < 0.30.0 SMTP Header Injection via Webhook Event Title