Advisories

Vulnerability Disclosure

Our vulnerability research focuses on finding high-impact flaws in widely used software to help secure organizations in Canada and around the globe. This page serves as a central hub for our ethical vulnerability disclosures. Through our partnerships with national agencies like the Canadian Centre for Cyber Security and US-CERT, we work proactively to advance industry standards and provide researchers with a secure, coordinated path for disclosure.

pgAdmin Meta-Command Filter Command Execution

Affecting

pgAdmin < 9.11
December 11, 2025Critical

pgAdmin Restore Restriction Bypass Leading to Command Execution

Affecting

pgAdmin 4 <= 9.11
February 5, 2026High

KDE Frameworks Command Execution

Affecting

KDE Frameworks < 51.60
August 7, 2019High

KDE Ark Directory Traversal Leading to Code Execution

Affecting

KDE Ark < 20.08.0
July 30, 2019High

EA Origin Remote Code Execution via Protocol Handler Argument Injection

Affecting

EA Origin < 10.5.39
June 14, 2019High

EA Origin Remote Code Execution via Custom Protocol Handler

Affecting

EA Origin < 10.5.36
April 19, 2019High

Apple Music for Windows Arbitrary JavaScript Execution

Affecting

Apple Music for Windows < 1.5.0
December 10, 2024Medium

Pexip Infinity Connect Arbitrary JavaScript Execution

Affecting

Pexip Infinity Connect < 1.13.0
July 1, 2024Medium

Maltego XML External Entity Injection

Affecting

Maltego < 4.2.12
August 27, 2020Medium