// Blog

Publications

Advisories, CVEs and technical write-ups from our vulnerability research.

2026

Nov 13, 2026 Advisory

Multiple vulnerabilities in Agora-Project (≤ 26.5.2)

Multiple vulnerabilities have been discovered in the Agora Project collaboration platform. These vulnerabilities range from simple XSS to pre-authentication RCE.

29 CVE max Critical CVEWebSQLiXSSRCEBACIDOR

Mar 25, 2026 Advisory

Multiple vulnerabilities in GestSup support platform (GestSup ≤ 3.2.59)

CSRF, multiple SQL injections and a stored XSS affecting the GestSup ticketing platform up to 3.2.59, fixed in 3.2.60.

5 CVE max High CVEWebSQLiXSSCSRF

2025

Mar 31, 2025 Advisory

Multiple vulnerabilities in Teampass password manager (Teampass ≤ 3.1.2.45)

Eight vulnerabilities in the Teampass password manager, from a pre-authentication SQL injection to remote code injection and broken access control.

8 CVE max Critical CVEWebSQLiXSSRCE