Skip to content
Secur0
Solutions
AI Agent Security New Protect your AI agents Vulnerability Disclosure Secure reporting channel Penetration Testing Expert manual audits Crowdsourced Pentest Thousands of hackers, one goal Bug Bounty Success-based payment Live Hacking Live real-time pentesting For company teams Train your technical team For educational centers Bring hacking to the classroom For hackers Learn and get certified Competitions / CTFs Put your skills to the test
Customer Stories
View all Penetration Testing Manual pentesting VDP Secure reporting channel Pentest In-depth audits Crowdsourced Pentest Thousands of hackers, one goal Bug Bounty Success-based payment
Resources
About Secur0 Get to know us Jobs Join the team Media Kit Brand resources Contact Talk to us Newsletter Industry news Blog Articles and guides Partners Join the partner network We are a CNA We are a CVE Numbering Authority
Are you a hacker?
Request a demo Log in
Español English

Vulnerabilities published by Secur0

Explore the list of CVEs reported through Secur0's programs. Check technical details and vulnerability statuses.

CVE-2026-59239

Stored XSS in Prospero Flow CRM email body allows administrator account takeover

High
CVE-2026-59235

Missing authorization in Prospero Flow CRM allows low-privileged users to read all bank accounts

High
CVE-2026-13164

Unauthenticated self-registration in MailerUp allows access to stored email data

High
CVE-2026-59232

Stored Cross-site Scripting in Prospero Flow CRM allows JavaScript execution via the lead form name field

Medium
CVE-2026-59231

Server-Side Request Forgery in Pentestify allows authenticated users to trigger outbound server requests via unvalidated image URLs

Medium
CVE-2026-59240

IDOR in Prospero Flow CRM allows deletion of other users notifications

Medium
CVE-2026-59238

Stored XSS in Pentestify via unsanitized finding images and report client logo

Medium
CVE-2026-59237

IDOR in Prospero Flow CRM Order API allows cross-tenant read and modification of orders

Medium
CVE-2026-59236

Authorization bypass in Prospero Flow CRM Excel import allows cross-tenant record injection

Medium
CVE-2026-59234

IDOR in Prospero Flow CRM allows deletion of other users' calendar events

Medium
CVE-2026-13163

Lack of input validation in Mailerup input parameter leads to Open Redirect

Medium
CVE-2026-13150

SSRF in Pentestify PDF generation endpoint via crafted Host header

Medium

Found a vulnerability? Learn more in our Disclosure policy