Disclosed vulnerabilities

The following is a list of publicly disclosed vulnerabilities discovered and released according to the documented disclosure policy.

• Vtenext 25.02 vulnerability research - A three-way path to RCE
  2025, 12 August

• Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions in Prevent Direct Access Wordpress Plugin (CVE-2025-3861)
  2025, 24 April

• Authenticated Static Code Injections in OpenCart (CVE-2023-47444)
  2023, 14 November

• Digital Private Vault (APK) - Subverting an (in)secure Android vault
  2023, 29 June