VulnCheck

XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint

XenForo < 2.3.13 XSS via Dynamic Redirect Handler

XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher

FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition

FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()

FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler

GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client

AJCloud AJY IPC Firmware Path Traversal via jdbhttpd

Rara One Click Demo Import < 1.3.5 Arbitrary File Upload RCE

pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php