Snapshot 253470
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Solution Plans Resources Advisories Company Select Language EN Contact sales Log in Try for free Select Language EN Contact sales Try for free Select Language EN Publicly disclosed vulnerabilities discovered by or reported to Fluid Attacks Search by term Search filters Discovered by All Severity All Reset filters AI SAST Scanner LimeSurvey 7.8.0 - SQL injection via Archive Attributes 7.1 High CVE-2026-116645 Published date: Nov 10, 2026 Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more AI SAST Scanner LimeSurvey 7.7.0 - Stored XSS in Central Participants blocklist control 7.4 High CVE-2026-115640 Published date: Nov 9, 2026 Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more AI SAST Scanner HumHub 1.19.0 - Stored XSS in friendship confirmation 7.2 High CVE-2026-115541 Published date: Nov 3, 2026 Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more Our pentesters PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host 8.6 High CVE-2026-103038 Published date: Oct 19, 2026 Discovered by Andrés Ramos Read more Our pentesters ExifTool for photo and video 5.0.1 - Local OS command injection through filenames during CSV export 8.4 High CVE-2026-101947 Published date: Oct 9, 2026 Discovered by Andrés Ramos Read more External pentesters openSIS 9.3 - Insecure Direct Object Reference (IDOR) 9.3 Critical CVE-2026-91107 Published date: Oct 5, 2026 Discovered by Daniel Esteban Celis Read more AI SAST Scanner LimeSurvey 7.4.0 - Stored XSS through the Date/Time date_min question attribute 7.2 High CVE-2026-102626 Published date: Oct 1, 2026 Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more Our pentesters LimeSurvey 7.3.0 - Cross-survey object authorization bypass in REST survey patch operations 7.1 High CVE-2026-97685 Published date: Sep 28, 2026 Discovered by Miguel Gómez Read more Load more Search by term Search filters Discovered by All Severity All Reset filters AI SAST Scanner LimeSurvey 7.8.0 - SQL injection via Archive Attributes 7.1 High CVE-2026-116645 Published date: Nov 10, 2026 Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more AI SAST Scanner LimeSurvey 7.7.0 - Stored XSS in Central Participants blocklist control 7.4 High CVE-2026-115640 Published date: Nov 9, 2026 Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more AI SAST Scanner HumHub 1.19.0 - Stored XSS in friendship confirmation 7.2 High CVE-2026-115541 Published date: Nov 3, 2026 Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more Our pentesters PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host 8.6 High CVE-2026-103038 Published date: Oct 19, 2026 Discovered by Andrés Ramos Read more Our pentesters ExifTool for photo and video 5.0.1 - Local OS command injection through filenames during CSV export 8.4 High CVE-2026-101947 Published date: Oct 9, 2026 Discovered by Andrés Ramos Read more External pentesters openSIS 9.3 - Insecure Direct Object Reference (IDOR) 9.3 Critical CVE-2026-91107 Published date: Oct 5, 2026 Discovered by Daniel Esteban Celis Read more AI SAST Scanner LimeSurvey 7.4.0 - Stored XSS through the Date/Time date_min question attribute 7.2 High CVE-2026-102626 Published date: Oct 1, 2026 Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more Our pentesters LimeSurvey 7.3.0 - Cross-survey object authorization bypass in REST survey patch operations 7.1 High CVE-2026-97685 Published date: Sep 28, 2026 Discovered by Miguel Gómez Read more Load more Search by term Search filters Discovered by All Severity All Reset filters AI SAST Scanner LimeSurvey 7.8.0 - SQL injection via Archive Attributes 7.1 High CVE-2026-116645 Published date: Nov 10, 2026 Discovered by Miguel Gómez Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more AI SAST Scanner LimeSurvey 7.7.0 - Stored XSS in Central Participants blocklist control 7.4 High CVE-2026-115640 Published date: Nov 9, 2026 Discovered by Miguel Gómez Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more AI SAST Scanner HumHub 1.19.0 - Stored XSS in friendship confirmation 7.2 High CVE-2026-115541 Published date: Nov 3, 2026 Discovered by Miguel Gómez Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more Our pentesters PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host 8.6 High CVE-2026-103038 Published date: Oct 19, 2026 Discovered by Andrés Ramos Read more Our pentesters ExifTool for photo and video 5.0.1 - Local OS command injection through filenames during CSV export 8.4 High CVE-2026-101947 Published date: Oct 9, 2026 Discovered by Andrés Ramos Read more External pentesters openSIS 9.3 - Insecure Direct Object Reference (IDOR) 9.3 Critical CVE-2026-91107 Published date: Oct 5, 2026 Discovered by Daniel Esteban Celis Read more AI SAST Scanner LimeSurvey 7.4.0 - Stored XSS through the Date/Time date_min question attribute 7.2 High CVE-2026-102626 Published date: Oct 1, 2026 Discovered by Miguel Gómez Detected by Fluid Attacks AI SAST Scanner, disclosed by Miguel Gómez Read more Our pentesters LimeSurvey 7.3.0 - Cross-survey object authorization bypass in REST survey patch operations 7.1 High CVE-2026-97685 Published date: Sep 28, 2026 Discovered by Miguel Gómez Read more Load more Learn about our policy for disclosing advisories of vulnerabilities in third-party, open-source products. View disclosure policy View disclosure policy Reduce risk without slowing delivery Fast and accurate results from one continuous security program powered by AI, scanners, and pentesters. Start free trial Launch interactive demo Reduce risk without slowing delivery Fast and accurate results from one continuous security program powered by AI, scanners, and pentesters. Start free trial Launch interactive demo Reduce risk without slowing delivery Fast and accurate results from one continuous security program powered by AI, scanners, and pentesters. Start free trial Launch interactive demo Solutions Platform Demo AI products Integrations AppSec ACSA ASPM AI security Cloud security RBVM SSCS Compliance DevSecOps Products AI SAST SAST SCA Secret scanning DAST MAST CSPM PTaaS Secure code review Reverse engineering Resources Advisories Blog Cybersecurity essentials Success stories Reports Events Documentation Database Courses on our platform Company About us Tool benchmark Customers Certifications Partners Careers CTF Trust center Anonymous reporting Get an AI summary of Fluid Attacks © 2026 Fluid Attacks Terms of use Privacy policy System status Cookie policy Subscribe to our newsletter Solutions Platform Demo AI products Integrations AppSec ACSA ASPM AI security Cloud security RBVM SSCS Compliance DevSecOps Products AI SAST SAST SCA Secret scanning DAST MAST CSPM PTaaS Secure code review Reverse engineering Resources Advisories Blog Cybersecurity essentials Success stories Reports Events Documentation Database Courses on our platform Company About us Tool benchmark Customers Certifications Partners Careers CTF Trust center Anonymous reporting Get an AI summary of Fluid Attacks © 2026 Fluid Attacks Terms of use Privacy policy System status Cookie policy Subscribe to our newsletter Solutions Platform Demo AI products Integrations AppSec ACSA ASPM AI security Cloud security RBVM SSCS Compliance DevSecOps Products AI SAST SAST SCA Secret scanning DAST MAST CSPM PTaaS Secure code review Reverse engineering Resources Advisories Blog Cybersecurity essentials Success stories Reports Events Documentation Database Courses on our platform Company About us Tool benchmark Customers Certifications Partners Careers CTF Trust center Anonymous reporting Get an AI summary of Fluid Attacks © 2026 Fluid Attacks Terms of use Privacy policy System status Cookie policy Subscribe to our newsletter