Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
code-projects Chat System up to 1.0 has SQL injection via the cid argument in confirm_password.php; the exploit is public. No fix listed; restrict access.
Claude Code before 1.0.105 could bypass its confirmation prompt through a command parsing error. Auto-update users are covered; others update to 1.0.105+.
rAthena builds before commit 0cc348b lack a bounds check in chclif_parse_moveCharSlot, allowing out-of-bounds reads and writes. Update past that commit.
DataEase up to 2.10.12 does not validate the H2 JDBC URL prefix, so a crafted configuration can lead to remote code execution. Upgrade to 2.10.13 or later.
RT-Thread 5.1.0 mishandles the from argument in sys_recvfrom, causing memory corruption in the kernel handler. No fix is listed; follow the project issue.
RT-Thread 5.1.0 does not validate the how argument of sys_thread_sigprocmask, leading to an array index flaw. No fix is listed; follow the project issue.
RT-Thread 5.1.0 has a null pointer dereference in csys_sendto through the to argument, which can crash a device. No fix listed; follow the project issue.
The WPLMS learning management theme through 4.970 lacks an authorization check, allowing limited unauthorized changes. No fix in the record; check vendor.
RT-Thread 5.1.0 does not validate the how argument of sys_sigprocmask, leading to an array index flaw. No fix is listed; follow the project issue.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
