This register documents vulnerabilities discovered, reported or tracked by LABS @ ITRES. Public entries include CVE identifiers and references where disclosure has been completed. Internal identifiers are used for tracking and do not necessarily correspond to assigned CVEs.
Some records remain restricted to protect affected parties and preserve coordinated disclosure. We do not publish sensitive details before they can be responsibly disclosed. For information about our coordination process and publication timelines, see our Vulnerability Disclosure Policy.
| Internal ID | CVE | Product / Vendor |
|---|---|---|
| I3-VULN-2023-001 | CVE-2023-3349 | Ibermática RPS 2019 |
| I3-VULN-2023-002 | CVE-2023-3350 | Ibermática RPS 2019 |
| I3-VULN-2024-001 | CVE-2024-1343 | LaborOfficeFree 19.10 |
| I3-VULN-2024-002 | CVE-2024-1344 | LaborOfficeFree 19.10 |
| I3-VULN-2024-003 | CVE-2024-1345 | LaborOfficeFree 19.10 |
| I3-VULN-2024-004 | CVE-2024-1346 | LaborOfficeFree 19.10 |
| I3-VULN-2024-005 | CVE-2024-3704 | OpenGnsys 1.1.1d |
| I3-VULN-2024-006 | CVE-2024-3705 | OpenGnsys 1.1.1d |
| I3-VULN-2024-007 | CVE-2024-3706 | OpenGnsys 1.1.1d |
| I3-VULN-2024-008 | CVE-2024-3707 | OpenGnsys 1.1.1d |
| I3-VULN-2024-009 | CVE-2024-7479 | TeamViewer Remote Clients (Windows) |
| I3-VULN-2024-010 | CVE-2024-7481 | TeamViewer Remote Clients (Windows) |
| I3-VULN-2025-001 | CVE-2025-1868 | Advanced IP Scanner / Advanced Port Scanner (Famatech) |
| I3-VULN-2025-002 | CVE-2025-31702 | Dahua embedded products |
| I3-VULN-2025-003 | CVE-2025-40677 | Summar Software – Employee Portal |
| I3-VULN-2025-004 | CVE-2025-40678 | Summar Software – Employee Portal |
| I3-VULN-2025-005 | CVE-2025-40698 | Prevengos (Nedatec Consulting) |
| I3-VULN-2025-006 | CVE-2025-40699 | Prevengos (Nedatec Consulting) |
| I3-VULN-2025-007 | CVE-2025-41028 | Epsilon RH (Grupo Castilla) |
| I3-VULN-2025-008 | CVE-2025-68686 | Fortinet Fortigate VPN SSL |
| I3-VULN-2025-009 | N/D | Private (not publicly disclosed) |
| I3-VULN-2026-001 | CVE-2026-8076 | CashDro 3 |
| I3-VULN-2026-002 | CVE-2026-8077 | CashDro 3 |
| I3-VULN-2026-003 | CVE-2026-84186 | Prestashop |
| I3-VULN-2026-004 | CVE-2026-108070 | TSplus Remote Access 19.20.3.10 |
| I3-VULN-2026-005 | CVE-2026-108071 | TSplus Remote Access 19.20.3.10 |
| I3-VULN-2026-006 | CVE-2026-108072 | TSplus Remote Access 19.20.3.10 |
| I3-VULN-2026-007 | N/D | Private (not publicly disclosed) |
| I3-VULN-2026-008 | N/D | Private (not publicly disclosed) |
| I3-VULN-2026-009 | N/D | Private (not publicly disclosed) |
| I3-VULN-2026-010 | N/D | Private (not publicly disclosed) |
| I3-VULN-2026-011 | N/D | Private (not publicly disclosed) |
| I3-VULN-2026-012 | N/D | Private (not publicly disclosed) |
| I3-VULN-2026-013 | N/D | Private (not publicly disclosed) |