Publicly disclosed vulnerabilities discovered by or reported to Fluid Attacks
Our pentesters
Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR)
5.3
Medium
CVE-2025-15265
Published date:
15 de jan. de 2026
Discovered by
Camilo Vera
Our pentesters
Nu Html Checker (validator.nu) - Restriction bypass vulnerability allowing local SSRF
6.9
Medium
CVE-2025-15104
Published date:
13 de jan. de 2026
Discovered by
Oscar Uribe
Our pentesters
Quill 2.0.3 - Lack of data validation in HTML export allowing XSS
5.1
Medium
CVE-2025-15056
Published date:
13 de jan. de 2026
Discovered by
Cristian Vargas
Our pentesters
Eddie VPN 2.24.6 - Local Privilege Escalation
8.5
High
CVE-2025-14979
Published date:
6 de jan. de 2026
Discovered by
Oscar Uribe
Our pentesters
BuhoNTFS 1.3.2 - Local Privilege Escalation
8.5
High
CVE-2025-13733
Published date:
12 de dez. de 2025
Discovered by
Oscar Uribe
Our pentesters
Code Injection in Wave Term v0.12.2 allowing TCC Bypass
6.9
Medium
CVE-2025-12843
Published date:
12 de dez. de 2025
Discovered by
Oscar Uribe
External pentesters
i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel
4.8
Medium
CVE-2025-9638
Published date:
9 de dez. de 2025
Discovered by
Marcelo Queiroz
Our pentesters
Frappe Helpdesk 1.14.0 — SQL Injection in dashboard get_dashboard_data
8.6
High
CVE-2025-10655
Published date:
9 de dez. de 2025
Discovered by
Cristian Vargas
Carregar mais
Our pentesters
Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR)
5.3
Medium
CVE-2025-15265
Published date:
15 de jan. de 2026
Discovered by
Camilo Vera
Our pentesters
Nu Html Checker (validator.nu) - Restriction bypass vulnerability allowing local SSRF
6.9
Medium
CVE-2025-15104
Published date:
13 de jan. de 2026
Discovered by
Oscar Uribe
Our pentesters
Quill 2.0.3 - Lack of data validation in HTML export allowing XSS
5.1
Medium
CVE-2025-15056
Published date:
13 de jan. de 2026
Discovered by
Cristian Vargas
Our pentesters
Eddie VPN 2.24.6 - Local Privilege Escalation
8.5
High
CVE-2025-14979
Published date:
6 de jan. de 2026
Discovered by
Oscar Uribe
Our pentesters
BuhoNTFS 1.3.2 - Local Privilege Escalation
8.5
High
CVE-2025-13733
Published date:
12 de dez. de 2025
Discovered by
Oscar Uribe
Our pentesters
Code Injection in Wave Term v0.12.2 allowing TCC Bypass
6.9
Medium
CVE-2025-12843
Published date:
12 de dez. de 2025
Discovered by
Oscar Uribe
External pentesters
i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel
4.8
Medium
CVE-2025-9638
Published date:
9 de dez. de 2025
Discovered by
Marcelo Queiroz
Our pentesters
Frappe Helpdesk 1.14.0 — SQL Injection in dashboard get_dashboard_data
8.6
High
CVE-2025-10655
Published date:
9 de dez. de 2025
Discovered by
Cristian Vargas
Carregar mais
Our pentesters
Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR)
5.3
Medium
CVE-2025-15265
Published date:
15 de jan. de 2026
Discovered by
Camilo Vera
Our pentesters
Nu Html Checker (validator.nu) - Restriction bypass vulnerability allowing local SSRF
6.9
Medium
CVE-2025-15104
Published date:
13 de jan. de 2026
Discovered by
Oscar Uribe
Our pentesters
Quill 2.0.3 - Lack of data validation in HTML export allowing XSS
5.1
Medium
CVE-2025-15056
Published date:
13 de jan. de 2026
Discovered by
Cristian Vargas
Our pentesters
Eddie VPN 2.24.6 - Local Privilege Escalation
8.5
High
CVE-2025-14979
Published date:
6 de jan. de 2026
Discovered by
Oscar Uribe
Our pentesters
BuhoNTFS 1.3.2 - Local Privilege Escalation
8.5
High
CVE-2025-13733
Published date:
12 de dez. de 2025
Discovered by
Oscar Uribe
Our pentesters
Code Injection in Wave Term v0.12.2 allowing TCC Bypass
6.9
Medium
CVE-2025-12843
Published date:
12 de dez. de 2025
Discovered by
Oscar Uribe
External pentesters
i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel
4.8
Medium
CVE-2025-9638
Published date:
9 de dez. de 2025
Discovered by
Marcelo Queiroz
Our pentesters
Frappe Helpdesk 1.14.0 — SQL Injection in dashboard get_dashboard_data
8.6
High
CVE-2025-10655
Published date:
9 de dez. de 2025
Discovered by
Cristian Vargas
Carregar mais
Our pentesters
Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR)
5.3
Medium
CVE-2025-15265
Published date:
15 de jan. de 2026
Discovered by
Camilo Vera
Our pentesters
Nu Html Checker (validator.nu) - Restriction bypass vulnerability allowing local SSRF
6.9
Medium
CVE-2025-15104
Published date:
13 de jan. de 2026
Discovered by
Oscar Uribe
Our pentesters
Quill 2.0.3 - Lack of data validation in HTML export allowing XSS
5.1
Medium
CVE-2025-15056
Published date:
13 de jan. de 2026
Discovered by
Cristian Vargas
Our pentesters
Eddie VPN 2.24.6 - Local Privilege Escalation
8.5
High
CVE-2025-14979
Published date:
6 de jan. de 2026
Discovered by
Oscar Uribe
Our pentesters
BuhoNTFS 1.3.2 - Local Privilege Escalation
8.5
High
CVE-2025-13733
Published date:
12 de dez. de 2025
Discovered by
Oscar Uribe
Our pentesters
Code Injection in Wave Term v0.12.2 allowing TCC Bypass
6.9
Medium
CVE-2025-12843
Published date:
12 de dez. de 2025
Discovered by
Oscar Uribe
External pentesters
i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel
4.8
Medium
CVE-2025-9638
Published date:
9 de dez. de 2025
Discovered by
Marcelo Queiroz
Our pentesters
Frappe Helpdesk 1.14.0 — SQL Injection in dashboard get_dashboard_data
8.6
High
CVE-2025-10655
Published date:
9 de dez. de 2025
Discovered by
Cristian Vargas
Carregar mais


Learn about our policy for disclosing advisories of vulnerabilities in third-party, open-source products.


Comece seu teste gratuito de 21 dias
Descubra os benefícios de nossa solução de Hacking Contínuo, da qual empresas de todos os tamanhos já desfrutam.


Comece seu teste gratuito de 21 dias
Descubra os benefícios de nossa solução de Hacking Contínuo, da qual empresas de todos os tamanhos já desfrutam.


Comece seu teste gratuito de 21 dias
Descubra os benefícios de nossa solução de Hacking Contínuo, da qual empresas de todos os tamanhos já desfrutam.


As soluções da Fluid Attacks permitem que as organizações identifiquem, priorizem e corrijam vulnerabilidades em seus softwares ao longo do SDLC. Com o apoio de IA, ferramentas automatizadas e pentesters, a Fluid Attacks acelera a mitigação da exposição ao risco das empresas e fortalece sua postura de cibersegurança.
Assine nossa newsletter
Mantenha-se atualizado sobre nossos próximos eventos e os últimos posts do blog, advisories e outros recursos interessantes.
© 2026 Fluid Attacks. We hack your software.

As soluções da Fluid Attacks permitem que as organizações identifiquem, priorizem e corrijam vulnerabilidades em seus softwares ao longo do SDLC. Com o apoio de IA, ferramentas automatizadas e pentesters, a Fluid Attacks acelera a mitigação da exposição ao risco das empresas e fortalece sua postura de cibersegurança.
Assine nossa newsletter
Mantenha-se atualizado sobre nossos próximos eventos e os últimos posts do blog, advisories e outros recursos interessantes.
Mantenha-se atualizado sobre nossos próximos eventos e os últimos posts do blog, advisories e outros recursos interessantes.
© 2026 Fluid Attacks. We hack your software.

As soluções da Fluid Attacks permitem que as organizações identifiquem, priorizem e corrijam vulnerabilidades em seus softwares ao longo do SDLC. Com o apoio de IA, ferramentas automatizadas e pentesters, a Fluid Attacks acelera a mitigação da exposição ao risco das empresas e fortalece sua postura de cibersegurança.
Assine nossa newsletter
Mantenha-se atualizado sobre nossos próximos eventos e os últimos posts do blog, advisories e outros recursos interessantes.
Mantenha-se atualizado sobre nossos próximos eventos e os últimos posts do blog, advisories e outros recursos interessantes.
© 2026 Fluid Attacks. We hack your software.





