Even small vulnerabilities can lead to cyberattacks, data breaches, and unauthorized access. Run a Free Basic Pen Test to identify security gaps in your web application. Check for open and vulnerable ports, missing security headers, outdated technologies, XSS risks, open redirections, and more—before attackers do. Strengthen your security today!
Run a Free Security Scan
At Pro Secure Labs, we expose the hidden vulnerabilities that put your site at risk — from outdated plugins and weak configurations to insecure APIs hackers love to exploit.
CVE-2026-105689
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, app.util.ssrf/blocked-address? relies on Java...
CVE-2026-105683
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff...
CVE-2026-105678
Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role...
CVE-2026-105651
Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store...
CVE-2026-105389
A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing...
CVE-2026-104029
A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the...
CVE-2026-95166
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payloa...
CVE-2026-95165
Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in the Organization name field.
CVE-2026-105646
Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessi...
CVE-2026-105641
Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/comm...
CVE-2026-105636
Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/web...
CVE-2026-104714
Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Stru...
CVE-2026-104713
Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is r...
CVE-2026-104712
Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an...
CVE-2026-104711
Improper neutralization of special elements used in an expression language statement ('Expression Language Injection') v...
Comprising accomplished cybersecurity specialists, we offer unmatched insights fortified by a proven track record. Our profound comprehension of the threat landscape empowers you to proactively navigate cyber risks.
Encompassing risk assessment to incident response, our comprehensive cybersecurity services span the entire spectrum. We serve as your steadfast companion throughout the digital journey, ensuring safeguarded passage.
With
cyber threats on the rise, trust Pro Secure
Labs
to empower your defense.
We aren't just
about security; we're about empowerment.
We believe in equipping you with the
knowledge and
tools to take control of your digital landscape.
Partner with us, and let's navigate the
evolving cybersecurity landscape together.
