help@fluidattacks.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS help@fluidattacks.com
03
assessed vulnerabilities (281)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-103038US | — | — | ||
PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host va… | ||||
| CVE-2026-101947US | — | — | ||
ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path i… | ||||
| CVE-2026-91107US | — | — | ||
openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update path t… | ||||
| CVE-2026-102626US | — | — | ||
An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the date_min attribute of a Date/Time q… | ||||
| CVE-2026-97685US | — | — | ||
An authenticated LimeSurvey Community Edition 7.3.0 user allowed to create surveys can use their own survey as an authorized context while supplying question or answer identifiers… | ||||
| CVE-2026-85082US | — | — | ||
Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command. | ||||
| CVE-2026-84283US | — | — | ||
Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has acces… | ||||
| CVE-2026-92730US | — | — | ||
LimeSurvey Community Edition 7.0.14 contains a reflected cross-site scripting vulnerability on the administrative survey-participant CSV import result page. | ||||
| CVE-2026-91775US | — | — | ||
LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the admi… | ||||
| CVE-2026-93769US | — | — | ||
HumHub 1.18.5 is affected by a stored cross-site scripting (XSS) vulnerability that allows any user holding the delegated, non-system-administrator Manage Users permission (admin_m… | ||||
| CVE-2026-77875US | — | — | ||
The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared e… | ||||
| CVE-2026-79954US | —OT elevated | — | ||
NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the Security Association used for SDLS processing… | ||||
| CVE-2026-77884US | — | — | ||
Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and direct… | ||||
| CVE-2026-81301US | — | — | ||
Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions.
The provider maps the cal… | ||||
| CVE-2026-19754US | — | — | ||
Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify Formula fi… | ||||
| CVE-2026-65931US | —OT elevated | — | ||
LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint.
An authenticated user with only the… | ||||
| CVE-2026-65930US | — | — | ||
LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.T… | ||||
| CVE-2026-63360US | — | — | ||
LimeSurvey Community Edition 7.0.5+260623 contains an authenticated reflected Cross-Site Scripting vulnerability in the user activation confirmation endpoint. The action query para… | ||||
| CVE-2026-16809US | — | — | ||
LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create a… | ||||
| CVE-2026-15973US | — | — | ||
LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the Survey Menu Entries administration page. An authenticated user with the global settin… | ||||