Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-3807 is a medium unrestricted file upload in zhenfeng13 My-BBS 1.0 via the Upload function. No fix is listed, so limit access and check uploads.
CVE-2025-3800 is a high SQL injection in WCMS 11 through the mobile_phone argument. No fix is listed, so restrict access and parameterize queries.
CVE-2025-3799 is a high SQL injection in WCMS 11 through the email and username argument. No fix is listed, so restrict access and parameterize queries.
CVE-2025-3783 is a medium unrestricted file upload in SourceCodester Web-based Pharmacy Product Management System 1.0. No fix is listed, so limit access.
CVE-2025-3762 is a high severity buffer overflow in the MPUT command handler of PCMan FTP Server 2.0.7. No fix is listed, so limit access to the service.
CVE-2025-3757 is a critical signature verification bypass in OpenPubkey before 0.10.0. Upgrade to 0.10.0 or later and check what depends on the library.
CVE-2025-3729 is a high OS command injection in SourceCodester Web-based Pharmacy Product Management System 1.0. No fix is listed, so restrict access.
CVE-2025-3727 is a high severity buffer overflow in the STATUS command handler of PCMan FTP Server 2.0.7. No fix is listed, so limit access to the service.
CVE-2025-3726 is a high severity buffer overflow in the CD command handler of PCMan FTP Server 2.0.7. No fix is listed, so limit access to the service.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
