Publicly disclosed vulnerabilities discovered by or reported to Fluid Attacks

Search by term

Search filters

Discovered by



All



Severity



All



Reset filters

Our pentesters

OpenSearch 3.2.0 - Nested Boolean/Disjunction Asymmetric DoS

8.3

High

CVE-2025-9624

Published date:

Nov 25, 2025

Discovered by

Camilo Vera

Our pentesters

iStat Menus 7.10.4 - Local Privilege Escalation

9.3

Critical

CVE-2025-11921

Published date:

Nov 7, 2025

Discovered by

Oscar Uribe

Our pentesters

OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints

6.9

Medium

CVE-2025-10695

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

MacForge 1.2.0 Beta 1 - Local Privilege Escalation

9.3

Critical

CVE-2025-10751

Published date:

Oct 3, 2025

Discovered by

Oscar Uribe

Our pentesters

OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list

7.1

High

CVE-2025-10696

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

OpenSupports 4.11.0 — SQL Injection

7.1

High

CVE-2025-10692

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

is-localhost-ip 2.0.0 - SSRF via Restrictions bypass

6.9

Medium

CVE-2025-9960

Published date:

Sep 22, 2025

Discovered by

Cristian Vargas

Our pentesters

Ghost 6.0.6 - SSRF via oEmbed Bookmark

6.1

Medium

CVE-2025-9862

Published date:

Sep 17, 2025

Discovered by

Cristian Vargas

Search by term

Search filters

Discovered by



All



Severity



All



Reset filters

Our pentesters

OpenSearch 3.2.0 - Nested Boolean/Disjunction Asymmetric DoS

8.3

High

CVE-2025-9624

Published date:

Nov 25, 2025

Discovered by

Camilo Vera

Our pentesters

iStat Menus 7.10.4 - Local Privilege Escalation

9.3

Critical

CVE-2025-11921

Published date:

Nov 7, 2025

Discovered by

Oscar Uribe

Our pentesters

OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints

6.9

Medium

CVE-2025-10695

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

MacForge 1.2.0 Beta 1 - Local Privilege Escalation

9.3

Critical

CVE-2025-10751

Published date:

Oct 3, 2025

Discovered by

Oscar Uribe

Our pentesters

OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list

7.1

High

CVE-2025-10696

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

OpenSupports 4.11.0 — SQL Injection

7.1

High

CVE-2025-10692

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

is-localhost-ip 2.0.0 - SSRF via Restrictions bypass

6.9

Medium

CVE-2025-9960

Published date:

Sep 22, 2025

Discovered by

Cristian Vargas

Our pentesters

Ghost 6.0.6 - SSRF via oEmbed Bookmark

6.1

Medium

CVE-2025-9862

Published date:

Sep 17, 2025

Discovered by

Cristian Vargas

Search by term

Search filters

Discovered by



All



Severity



All



Reset filters

Our pentesters

OpenSearch 3.2.0 - Nested Boolean/Disjunction Asymmetric DoS

8.3

High

CVE-2025-9624

Published date:

Nov 25, 2025

Discovered by

Camilo Vera

Our pentesters

iStat Menus 7.10.4 - Local Privilege Escalation

9.3

Critical

CVE-2025-11921

Published date:

Nov 7, 2025

Discovered by

Oscar Uribe

Our pentesters

OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints

6.9

Medium

CVE-2025-10695

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

MacForge 1.2.0 Beta 1 - Local Privilege Escalation

9.3

Critical

CVE-2025-10751

Published date:

Oct 3, 2025

Discovered by

Oscar Uribe

Our pentesters

OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list

7.1

High

CVE-2025-10696

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

OpenSupports 4.11.0 — SQL Injection

7.1

High

CVE-2025-10692

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

is-localhost-ip 2.0.0 - SSRF via Restrictions bypass

6.9

Medium

CVE-2025-9960

Published date:

Sep 22, 2025

Discovered by

Cristian Vargas

Our pentesters

Ghost 6.0.6 - SSRF via oEmbed Bookmark

6.1

Medium

CVE-2025-9862

Published date:

Sep 17, 2025

Discovered by

Cristian Vargas

Search by term

Search filters

Discovered by



All



Severity



All



Reset filters

Our pentesters

OpenSearch 3.2.0 - Nested Boolean/Disjunction Asymmetric DoS

8.3

High

CVE-2025-9624

Published date:

Nov 25, 2025

Discovered by

Camilo Vera

Our pentesters

iStat Menus 7.10.4 - Local Privilege Escalation

9.3

Critical

CVE-2025-11921

Published date:

Nov 7, 2025

Discovered by

Oscar Uribe

Our pentesters

OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints

6.9

Medium

CVE-2025-10695

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

MacForge 1.2.0 Beta 1 - Local Privilege Escalation

9.3

Critical

CVE-2025-10751

Published date:

Oct 3, 2025

Discovered by

Oscar Uribe

Our pentesters

OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list

7.1

High

CVE-2025-10696

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

OpenSupports 4.11.0 — SQL Injection

7.1

High

CVE-2025-10692

Published date:

Oct 3, 2025

Discovered by

Cristian Vargas

Our pentesters

is-localhost-ip 2.0.0 - SSRF via Restrictions bypass

6.9

Medium

CVE-2025-9960

Published date:

Sep 22, 2025

Discovered by

Cristian Vargas

Our pentesters

Ghost 6.0.6 - SSRF via oEmbed Bookmark

6.1

Medium

CVE-2025-9862

Published date:

Sep 17, 2025

Discovered by

Cristian Vargas

Learn about our policy for disclosing advisories of vulnerabilities in third-party, open-source products.

View disclosure policy

Start your 21-day free trial

Discover the benefits of our Continuous Hacking solution, which organizations of all sizes are already enjoying.

Try for free

Contact sales

Start your 21-day free trial

Discover the benefits of our Continuous Hacking solution, which organizations of all sizes are already enjoying.

Try for free

Contact sales

Start your 21-day free trial

Discover the benefits of our Continuous Hacking solution, which organizations of all sizes are already enjoying.

Try for free

Contact sales

Solution

Plans

Resources

Advisories

Company

Select Language



Contact sales

Try for free

Select Language



Select Language



Contact sales

Try for free

Solution

Plans

Resources

Advisories

Company

Select Language



Contact sales

Try for free

Fluid Attacks' solutions enable organizations to identify, prioritize, and remediate vulnerabilities in their software throughout the SDLC. Supported by AI, automated tools, and pentesters, Fluid Attacks accelerates companies' risk exposure mitigation and strengthens their cybersecurity posture.