| CVE-2025-13823 | Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities | Rockwell Automation | Micro820®, Micro850®, Micro870® | - | - | 2025-12-15 15:17:49 | Deep Dive |
| CVE-2020-36899 | QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosure | Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. | QiHang Media Web Digital Signage | - | - | 2025-12-10 21:03:57 | Deep Dive |
| CVE-2020-36898 | QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Deletion | Shenzhen Xingmeng Qihang Media Co., Ltd.Guangzhou Hefeng Automation Technology Co., Ltd. | QiHang Media Web Digital Signage | - | - | 2025-12-10 21:03:26 | Deep Dive |
| CVE-2020-36897 | QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Execution | Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. | QiHang Media Web Digital Signage | - | - | 2025-12-10 21:02:56 | Deep Dive |
| CVE-2020-36896 | QiHang Media Web Digital Signage 3.0.9 Cleartext Credentials Disclosure | Shenzhen Xingmeng Qihang Media Co., Ltd.Guangzhou Hefeng Automation Technology Co., Ltd. | QiHang Media Web Digital Signage | - | - | 2025-12-10 20:55:03 | Deep Dive |
| CVE-2025-62873 | WordPress WP Flashy Marketing Automation plugin <= 2.0.8 - Cross Site Request Forgery (CSRF) vulnerability | Flashyapp | WP Flashy Marketing Automation | - | - | 2025-12-09 14:52:25 | Deep Dive |
| CVE-2025-67599 | WordPress WebToffee eCommerce Marketing Automation plugin <= 2.1.1 - Broken Access Control vulnerability | WebToffee | WebToffee eCommerce Marketing Automation | - | - | 2025-12-09 14:14:19 | Deep Dive |
| CVE-2025-9368 | 432ES-IG3 Series A Denial-of-Service Vulnerability | Rockwell Automation | 432ES-IG3 Series A | - | - | 2025-12-09 14:01:04 | Deep Dive |
| CVE-2025-12807 | FactoryTalk® DataMosaix™ Private Cloud SQL Injection | Rockwell Automation | FactoryTalk® DataMosaix™ Private Cloud | - | - | 2025-12-09 13:56:33 | Deep Dive |
| CVE-2025-10876 | XSS in Talent Software's e-Bap | Talent Software | e-BAP Automation | Medium | 5.3 | 2025-12-09 13:49:09 | Deep Dive |
| CVE-2025-6924 | Reflected XSS in Talent Software's e-BAP | Talent Software | e-BAP Automation | Medium | 5.4 | 2025-12-09 13:38:43 | Deep Dive |
| CVE-2024-3884 | Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded | Red Hat | Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | High | 7.5 | 2025-12-03 18:40:26 | Deep Dive |
| CVE-2025-41742 | Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components | Sprecher Automation | SPRECON-E-C | Critical | 9.8 | 2025-12-02 10:39:09 | Deep Dive |
| CVE-2025-41743 | Sprecher Automation: SPRECON-E series prone to weak encryption of update files | Sprecher Automation | SPRECON-E-C | Medium | 4.0 | 2025-12-02 10:38:52 | Deep Dive |
| CVE-2025-41744 | Sprecher Automation: SPRECON-E series has static default key material for TLS connections | Sprecher Automation | SPRECON-E-C | Critical | 9.1 | 2025-12-02 10:38:47 | Deep Dive |
| CVE-2025-12935 | FluentCRM - Marketing Automation For WordPress <= 2.9.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluentcrm_content' Shortcode | techjewel | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | Medium | 6.4 | 2025-11-21 12:28:08 | Deep Dive |
| CVE-2025-12750 | Groundhogg <= 4.2.6.1 - Authenticated (Admin+) SQL Injection | trainingbusinesspros | Groundhogg — CRM, Newsletters, and Marketing Automation | Medium | 4.9 | 2025-11-21 09:27:03 | Deep Dive |
| CVE-2025-11918 | Rockwell Automation Arena® Simulation Stack-Based Buffer Overflow Vulnerability | Rockwell Automation | Arena® Simulation | 高危 | - | 2025-11-14 13:28:39 | Deep Dive |
| CVE-2025-8855 | 2FA Expiry Bypass in Optimus Software's Brokerage Automation | Optimus Software | Brokerage Automation | High | 8.1 | 2025-11-14 12:39:46 | Deep Dive |
| CVE-2025-11697 | Studio 5000 ® Simulation Interface Local Code Execution | Rockwell Automation | Studio 5000 ® Simulation Interface | 高危 | - | 2025-11-11 13:49:50 | Deep Dive |