dreamstechnologies

Products

ProductCVEsExploitedLatest
Doccure2–Sep 8, 2025
Doccure Core2–Nov 3, 2025
Truelysell Core2–Feb 14, 2026
Listee1–Feb 27, 2026
Mentoring1–May 5, 2026

Exploited and recent CVEs

  • CVE-2025-13618 Critical 9.8 Mentoring <= 1.2.8 - Unauthenticated Privilege Escalation in mentoring_process_registration 0.3%
  • CVE-2025-12981 Critical 9.8 Listee <= 1.1.6 - Unauthenticated Privilege Escalation 0.6%
  • CVE-2025-8572 Critical 9.8 Truelysell Core <= 1.8.7 - Unauthenticated Privilege Escalation via Registration 0.5%
  • CVE-2025-8900 Critical 9.8 Doccure Core < 1.5.4 - Unauthenticated Privilege Escalation 0.4%
  • CVE-2025-10742 Critical 9.8 Truelysell Core <= 1.8.6 - Unauthenticated Arbitrary User Password Change 0.5%
  • CVE-2025-9114 Critical 9.8 Doccure <= 1.5.0 - Unauthenticated Arbitrary User Password Change 0.4%
  • CVE-2025-9113 Critical 9.8 Doccure Core <= 1.5.3 - Unauthenticated Arbitrary File Upload 0.6%
  • CVE-2025-9112 High 8.8 Doccure <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload 0.6%