Independent research, Responsible disclosure

Security Advisories

Vulnerabilities discovered and published by our research team. Each advisory documents the finding, the proof of concept, the impact, and the coordinated disclosure process with the manufacturer.

94 published advisories
15 years with publications
CVE registration and coordination with INCIBE
2001 investigating since
Último publicado
2026-18363 CVE-2026-18363 Critical severity

Mecanismo de recuperación de contraseña débil en osTicket

A logic flaw in the password reset token validation allows expired tokens to be reused to compromise user accounts.

August 2026 Ismael de Frutos Díaz CWE-640
CVSS 9.1
Ver advisory completo
Archivo completo

2026

2 advisorys
2026-18363 Weak password recovery mechanism in osTicket by Enhancesoft LLC Password Recovery 2026-9507 Session Fixation in osTicket v1.18.2 Session Fixation

2020

1 advisory
2020-001 URL Redirection to Untrusted Site ('Open Redirect') in Google generic TLD and ccTLD Open Redirect

2018

5 advisorys
2018-005 Cross Site Scripting (XSS Reflected) en Movistar Reflected XSS 2018-004 Directory Traversal on the UAM VPN Path Traversal 2018-003 Stored XSS on Microsoft Word (Office 365) Stored XSS 2018-002 (Blind) Stored XSS on earth.google.com Stored XSS 2018-001 XSS Reflected in MercadoLibre Reflected XSS

2017

19 advisorys
2017-019 Stored XSS found in Google Earth Stored XSS 2017-018 Reflected XSS found on a Vodafone Deutschland website Reflected XSS 2017-017 XSS Reflected found in a Vodafone Deutschland website Reflected XSS 2017-016 XSS Reflected found in the Vodafone German Shop Reflected XSS 2017-015 Reflected XSS found in the AT&T Reward Center portal Reflected XSS 2017-014 Reflected XSS found in the AT&T Reward Center portal Reflected XSS 2017-013 Se ha encontrado XSS Reflejado en el portal de registro de Microsoft Reflected XSS 2017-012 XSS Reflected found in the Microsoft Azure Marketplace website Reflected XSS 2017-011 XSS Reflected found in the Microsoft app Source Reflected XSS 2017-010 Google Earth 'QtWebKit4' NULL Pointer Dereference vulnerability NULL Pointer 2017-009 Path Traversal found in the External Documentation Nokia Repository Path Traversal 2017-008 XSS Reflected found in the SAP events portal Reflected XSS 2017-007 www.nod32.com.br from Nod32 Brazil vulnerable to Time-Based SQL injection SQL Injection 2017-006 Se encontró una inyección SQL en el comercio electrónico de ESET en Portugal. SQL Injection 2017-005 XSS Reflected found in the ESET UK Partner Login page Reflected XSS 2017-004 XSS Reflected found in the Portuguese ESET ecommerce Reflected XSS 2017-003 My AOL Today's News is vulnerable to Path Traversal Path Traversal 2017-002 Paypal(dot)com self-XSS vulnerability Self-XSS 2017-001 BlueRiver Mura CMS vulnerable to Stored Cross-Site Scripting via rb parameter Stored XSS

2016

2 advisorys
2016-002 Stored XSS in Google Sites Stored XSS 2016-001 Desk.com is affected by a Reflected Cross-Site Scripting vulnerability Reflected XSS

2015

1 advisory
2015-005 URL Redirection to Untrusted Site ('Open Redirect') in Google generic TLD and ccTLD Open Redirect

2014

1 advisory
2014-001 Reflected XSS vulnerability in Boxcryptor Reflected XSS

2013

16 advisorys
2013-018 Multiple XSS vulnerabilities in Project'Or RIA XSS 2013-017 SQL Injection in Project'Or RIA SQL Injection 2013-016 Vulnerabilidad CSRF en LinkedIn CSRF 2013-014 Multiple reflected XSS vulnerabilities in Atmail WebMail Reflected XSS 2013-012 Multiple Full Path Disclosure Vulnerabilities in TinyWebGallery Divulgación de ruta 2013-011 Vulnerabilidad de división de respuesta HTTP en WebCollab División de respuestas 2013-010 Multiple Reflected XSS Vulnerabilities in BoltWire <= v3.5 Cross-Site Scripting 2013-009 Multiple Vulnerabilities in Telaen Multiple 2013-008 Multiple Vulnerabilities in Uebimiau <= 2.7.11 Open Redirect / XSS 2013-007 XAMPP 1.8.1 Local Write Access Vulnerability Local Write Access 2013-006 Multiple Reflected XSS vulnerabilities in LinkedIn Investors Reflected XSS 2013-005 LinkedIn is affected by a Persistent Cross-Site Scripting vulnerability Stored XSS 2013-004 Reflected XSS in the view attachment message process of Atmail WebMail Reflected XSS 2013-003 Vulnerabilidad XSS en LinkedIn XSS 2013-002 Reflected XSS in Asteriskguru Queue Statistics Reflected XSS 2013-001 Vulnerabilidad CSRF en LinkedIn CSRF

2012

2 advisorys
2012-003 Multiple Reflected XSS vulnerabilities in LinkedIn Reflected XSS 2012-001 PL/SQL Injection in Oracle Portal Demo Organization Chart SQL Injection

2011

3 advisorys
2011-003 Multiple vulnerabilities in Zyncro social network Multiple Vulnerabilities 2011-002 Facebook social network vulnerable to CSRF Cross-Site Request Forgery 2011-001 Facebook social network vulnerable to Open Redirect Open Redirect

2010

10 advisorys
2010-011 Multiple vulnerabilities in Hi5.com social network Multiple Vulnerabilities 2010-010 Uninitialized variables allow access to the Motorito CMS administration panel Authentication Bypass 2010-009 Reflected XSS in the login process of Atmail WebMail Cross-Site Scripting 2010-008 Insecure Direct Object Reference in tuenti.com allow any message read Insecure Direct Object Reference 2010-007 XSS in Oracle Portal Database Access Descriptor Cross-Site Scripting 2010-006 Facebook Abuse of Functionality of Lint for anonymous port scan and DoS attacks Abuse of Functionality 2010-005 SQL Injection and XSS in Motorito Motorito < v2.0 Ni 483 SQL Injection / XSS 2010-004 Facebook HTML and Script code injection vulnerability Cross-Site Scripting 2010-002 Facebook Cross-Site Request Forgery vulnerability Cross-Site Request Forgery 2010-001 Facebook HTML and Script code injection vulnerability Cross-Site Scripting

2009

12 advisorys
2009-013 Cisco ASA <= 8.x VPN SSL module Clientless URL-list control bypass Access Control Bypass 2009-012 Horde 3.3.5 "PHP_SELF" Cross-Site Scripting vulnerability Cross-Site Scripting 2009-011 PHP-Calendar v1.1 'configfile' Remote and Local File Inclusion vulnerability File Inclusion 2009-010 WP-Forum <= 2.3 SQL Injection & Blind SQL Injection vulnerabilities SQL Injection 2009-009 Joomla! < 1.5.13 Multiple Full Path Disclosure vulnerabilities Information Disclosure 2009-008 Gmail vulnerable to automated password cracking Brute Force 2009-007 Joomla! < 1.5.12 Multiple XSS vulnerabilities in HTTP Headers Cross-Site Scripting 2009-006 Joomla! 1.5.10 JA_Purity Multiple Persistent XSS Stored Cross-Site Scripting 2009-005 Simple PHP Blog <= 0.5.1 Local File Include vulnerability Local File Inclusion 2009-003 QuiXplorer <= 2.4.1beta 'lang' parameter Remote Code Execution vulnerability Remote Code Execution 2009-002 eXtplorer standalone & Joomla!/Mambo Remote Code Execution vulnerability Remote Code Execution 2009-001 ModSecurity < 2.5.9 is vulnerable to a remote Denial of Service (DoS) Denial of Service

2008

3 advisorys
2008-004 PSI remote integer overflow DoS Integer Overflow / DoS 2009-004 WordPress MU < 2.7 'Host' HTTP Header Cross Site Scripting (XSS) Vulnerability Cross-Site Scripting 2008-001 WordPress is vulnerable to an unauthorized upgrade and XSS Unauthorized Upgrade / XSS

2007

6 advisorys
2007-006 Tikiwiki CMS is vulnerable to path traversal attack Path Traversal 2007-005 Cygwin buffer overflow due to incorrect filename length check Buffer Overflow 2007-004 wwwstats is vulnerable to Persistent XSS Stored Cross-Site Scripting 2007-003 CSRF vulnerability in GMail service Cross-Site Request Forgery 2007-002 Multiple vulnerabilities in WiFi router COMTREND CT-536/HG-536+ Multiple Vulnerabilities 2007-001 Oracle Reports Web Cartridge (RWCGI60) vulnerable to XSS Cross-Site Scripting

2006

11 advisorys
2006-013 Microsoft IIS5 NTLM and Basic authentication bypass Authentication Bypass 2006-011 IMAP/SMTP Injection in Hastymail IMAP/SMTP Injection 2006-010 XSS vulnerability in error page of ISMail Cross-Site Scripting 2006-009 rWeb application firewall is prone to multiple evasion attacks Filter Bypass 2006-007 BlueSocket web administration vulnerable to XSS Cross-Site Scripting 2006-006 SmbClientParser perl module allows remote command execution OS Command Injection 2006-005 Strings command is vulnerable to a Denial of Service Denial of Service 2006-004 VTLS.web.gateway cgi is vulnerable to XSS Cross-Site Scripting 2006-003 Arbitrary flash code remote execution in 123flashchat server Code Injection 2006-002 IMAP/SMTP Injection in SquirrelMail IMAP/SMTP Injection 2006-001 Arbitrary remote file creation in 123flashchat server Arbitrary File Creation
Divulgación responsable

Responsible Disclosure Policy

All findings are first communicated to the manufacturer and are only published once a fix is available or a reasonable response period has elapsed. We coordinate CVE registration and notification to the corresponding CERTs.

If you have identified a vulnerability in a product we audit, or would like our team to review yours before a third party does, please write to us.

Proceso de divulgación

01 Technical identification and verification of the finding
02 Private notification to the manufacturer
03 CVE request and coordination with CERT / INCIBE
04 Publication of the advisory with the fix available
Receive it by mail

Don't miss the next advisory

Security updates, newly published advisories, and invitations to technical webinars. Let us know what you are interested in and we will add you to the distribution list.

Subscribe to the newsletter See all newsletters
Contact

Would you like to know more about our publications?

Tell us about your situation and our team will get in touch with you to provide guidance or schedule a technical call.

Offices
Barcelona, Madrid, Bogotá

Request information

We will contact you as soon as possible.
Global Presence

Our offices

Barcelona

C. Santander, 101. Building A-2
E-08030 Barcelona (Spain)

+34 93 305 13 18
Madrid

Arequipa St., 1
28043 Madrid (Spain)

+34 91 763 40 47
Bogotá

Transversal 22 # 98-82, Porta 100 Building, Office 1003
110221 Bogotá (Colombia)

+57 601 638 68 88
25
years of experience in cybersecurity
Contact us