Publicly disclosed vulnerabilities discovered by or reported to Fluid Attacks
Our pentesters
Markdown-it 14.1.0 - Cross-site scripting (XSS)
6.9
Medium
CVE-2025-7969
Published date:
21 ago 2025
Discovered by
Camilo Vera
Our pentesters
Bunker Web 1.6.2 - Uncontrolled external site redirect
4.8
Medium
CVE-2025-8066
Published date:
15 ago 2025
Discovered by
Johan Giraldo
Our pentesters
KAP 3.6.0 - TCC Bypass
6.9
Medium
CVE-2025-7961
Published date:
14 ago 2025
Discovered by
Oscar Uribe
Our pentesters
Linkify 4.3.1 - Prototype Pollution & HTML Attribute Injection (XSS)
8.8
High
CVE-2025-8101
Published date:
25 jul 2025
Discovered by
Camilo Vera
Our pentesters
Calibre Web 0.6.24 - Blind Command Injection
5.9
Medium
CVE-2025-7404
Published date:
24 jul 2025
Discovered by
Johan Giraldo
Our pentesters
Calibre Web 0.6.24 - ReDoS
8.7
High
CVE-2025-6998
Published date:
24 jul 2025
Discovered by
Johan Giraldo
Our pentesters
XSS in Laundry allows to perform an Account Takeover
5.1
Medium
CVE-2025-52842
Published date:
2 jul 2025
Discovered by
Carlos Bello
Our pentesters
CSRF in Laundry allows to perform an account takeover
8.5
High
CVE-2025-52841
Published date:
2 jul 2025
Discovered by
Carlos Bello
Cargar más
Our pentesters
Markdown-it 14.1.0 - Cross-site scripting (XSS)
6.9
Medium
CVE-2025-7969
Published date:
21 ago 2025
Discovered by
Camilo Vera
Our pentesters
Bunker Web 1.6.2 - Uncontrolled external site redirect
4.8
Medium
CVE-2025-8066
Published date:
15 ago 2025
Discovered by
Johan Giraldo
Our pentesters
KAP 3.6.0 - TCC Bypass
6.9
Medium
CVE-2025-7961
Published date:
14 ago 2025
Discovered by
Oscar Uribe
Our pentesters
Linkify 4.3.1 - Prototype Pollution & HTML Attribute Injection (XSS)
8.8
High
CVE-2025-8101
Published date:
25 jul 2025
Discovered by
Camilo Vera
Our pentesters
Calibre Web 0.6.24 - Blind Command Injection
5.9
Medium
CVE-2025-7404
Published date:
24 jul 2025
Discovered by
Johan Giraldo
Our pentesters
Calibre Web 0.6.24 - ReDoS
8.7
High
CVE-2025-6998
Published date:
24 jul 2025
Discovered by
Johan Giraldo
Our pentesters
XSS in Laundry allows to perform an Account Takeover
5.1
Medium
CVE-2025-52842
Published date:
2 jul 2025
Discovered by
Carlos Bello
Our pentesters
CSRF in Laundry allows to perform an account takeover
8.5
High
CVE-2025-52841
Published date:
2 jul 2025
Discovered by
Carlos Bello
Cargar más
Our pentesters
Markdown-it 14.1.0 - Cross-site scripting (XSS)
6.9
Medium
CVE-2025-7969
Published date:
21 ago 2025
Discovered by
Camilo Vera
Our pentesters
Bunker Web 1.6.2 - Uncontrolled external site redirect
4.8
Medium
CVE-2025-8066
Published date:
15 ago 2025
Discovered by
Johan Giraldo
Our pentesters
KAP 3.6.0 - TCC Bypass
6.9
Medium
CVE-2025-7961
Published date:
14 ago 2025
Discovered by
Oscar Uribe
Our pentesters
Linkify 4.3.1 - Prototype Pollution & HTML Attribute Injection (XSS)
8.8
High
CVE-2025-8101
Published date:
25 jul 2025
Discovered by
Camilo Vera
Our pentesters
Calibre Web 0.6.24 - Blind Command Injection
5.9
Medium
CVE-2025-7404
Published date:
24 jul 2025
Discovered by
Johan Giraldo
Our pentesters
Calibre Web 0.6.24 - ReDoS
8.7
High
CVE-2025-6998
Published date:
24 jul 2025
Discovered by
Johan Giraldo
Our pentesters
XSS in Laundry allows to perform an Account Takeover
5.1
Medium
CVE-2025-52842
Published date:
2 jul 2025
Discovered by
Carlos Bello
Our pentesters
CSRF in Laundry allows to perform an account takeover
8.5
High
CVE-2025-52841
Published date:
2 jul 2025
Discovered by
Carlos Bello
Cargar más
Our pentesters
Markdown-it 14.1.0 - Cross-site scripting (XSS)
6.9
Medium
CVE-2025-7969
Published date:
21 ago 2025
Discovered by
Camilo Vera
Our pentesters
Bunker Web 1.6.2 - Uncontrolled external site redirect
4.8
Medium
CVE-2025-8066
Published date:
15 ago 2025
Discovered by
Johan Giraldo
Our pentesters
KAP 3.6.0 - TCC Bypass
6.9
Medium
CVE-2025-7961
Published date:
14 ago 2025
Discovered by
Oscar Uribe
Our pentesters
Linkify 4.3.1 - Prototype Pollution & HTML Attribute Injection (XSS)
8.8
High
CVE-2025-8101
Published date:
25 jul 2025
Discovered by
Camilo Vera
Our pentesters
Calibre Web 0.6.24 - Blind Command Injection
5.9
Medium
CVE-2025-7404
Published date:
24 jul 2025
Discovered by
Johan Giraldo
Our pentesters
Calibre Web 0.6.24 - ReDoS
8.7
High
CVE-2025-6998
Published date:
24 jul 2025
Discovered by
Johan Giraldo
Our pentesters
XSS in Laundry allows to perform an Account Takeover
5.1
Medium
CVE-2025-52842
Published date:
2 jul 2025
Discovered by
Carlos Bello
Our pentesters
CSRF in Laundry allows to perform an account takeover
8.5
High
CVE-2025-52841
Published date:
2 jul 2025
Discovered by
Carlos Bello
Cargar más


Learn about our policy for disclosing advisories of vulnerabilities in third-party, open-source products.


Inicia tu prueba gratuita de 21 días
Descubre los beneficios de nuestra solución Hacking Continuo, de la que ya disfrutan empresas de todos los tamaños.


Inicia tu prueba gratuita de 21 días
Descubre los beneficios de nuestra solución Hacking Continuo, de la que ya disfrutan empresas de todos los tamaños.


Inicia tu prueba gratuita de 21 días
Descubre los beneficios de nuestra solución Hacking Continuo, de la que ya disfrutan empresas de todos los tamaños.


Las soluciones de Fluid Attacks permiten a las organizaciones identificar, priorizar y remediar vulnerabilidades en su software a lo largo del SDLC. Con el apoyo de la IA, herramientas automatizadas y pentesters, Fluid Attacks acelera la mitigación de la exposición al riesgo de las empresas y fortalece su postura de ciberseguridad.
Soluciones
Objetivos
Suscríbete a nuestro boletín
Mantente al día sobre nuestros próximos eventos y los últimos blog posts, advisories y otros recursos interesantes.
© 2025 Fluid Attacks. We hack your software.

Las soluciones de Fluid Attacks permiten a las organizaciones identificar, priorizar y remediar vulnerabilidades en su software a lo largo del SDLC. Con el apoyo de la IA, herramientas automatizadas y pentesters, Fluid Attacks acelera la mitigación de la exposición al riesgo de las empresas y fortalece su postura de ciberseguridad.
Soluciones
Objetivos
Suscríbete a nuestro boletín
Mantente al día sobre nuestros próximos eventos y los últimos blog posts, advisories y otros recursos interesantes.
© 2025 Fluid Attacks. We hack your software.

Las soluciones de Fluid Attacks permiten a las organizaciones identificar, priorizar y remediar vulnerabilidades en su software a lo largo del SDLC. Con el apoyo de la IA, herramientas automatizadas y pentesters, Fluid Attacks acelera la mitigación de la exposición al riesgo de las empresas y fortalece su postura de ciberseguridad.
Soluciones
Objetivos
Suscríbete a nuestro boletín
Mantente al día sobre nuestros próximos eventos y los últimos blog posts, advisories y otros recursos interesantes.
© 2025 Fluid Attacks. We hack your software.