TThinkingreed Inc.

Products

Exploited and recent CVEs

• CVE-2026-71368 Medium 6.1 F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed. 0.3%
• CVE-2023-47609 Unrated SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by 1.1%
• CVE-2023-41150 Unrated F-RevoCRM 7.3 series prior to version7.3.8 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is 0.4%
• CVE-2023-41149 Unrated F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command o 1.5%