Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
D-Link DIR-880L firmware up to 104WWb01 has a medium severity command injection in ssdpcgi. The model is unsupported, so replace it and limit access.
D-Link DIR-890L and DIR-806A1 routers have a medium severity command injection in soap.cgi. The models are unsupported, so replace them and limit access.
eMagicOne Store Manager for WooCommerce up to 1.2.5 allows unauthenticated file upload with the default 1:1 password. Update and change the password.
PHPGurukul Visitor Management System 2.0: high severity SQL injection in visitor-detail.php. No fix is confirmed, so use prepared statements.
SourceCodester Student Clearance System 1.0: high severity SQL injection in login.php. No fix is confirmed, so use prepared statements and limit access.
SourceCodester Advanced Web Store 1.0 has a high severity SQL injection in index.php. No fix is confirmed, so use prepared statements and limit access.
SourceCodester Advanced Web Store 1.0 has a high severity SQL injection in admin_addnew_product.php. No fix is confirmed, so use prepared statements.
SourceCodester Advanced Web Store 1.0: high severity SQL injection in productdetail.php. No fix is confirmed, so use prepared statements and limit access.
itsourcecode Content Management System 1.0: high severity SQL injection in update_main_topic_img.php. No fix is confirmed, so use prepared statements.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
