https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-55129.htmlhttps://patchthecve.com/cve/CVE-2025-55129.htmlWed, 17 Jun 2026 09:41:19 +0000MEDIUM 5.4: HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne https://patchthecve.com/cve/CVE-2025-55128.htmlhttps://patchthecve.com/cve/CVE-2025-55128.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.5: HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.php”. An attacker with access to the admin interface could request an arbitrarily large number of items per page, potentially leading to a denial of service.https://patchthecve.com/cve/CVE-2025-55127.htmlhttps://patchthecve.com/cve/CVE-2025-55127.htmlWed, 17 Jun 2026 09:41:18 +0000MEDIUM 5.4: HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailing whitespace could be virtually indistinguishable from its legitimate counterpart when the username is displayed in the https://patchthecve.com/cve/CVE-2025-55126.htmlhttps://patchthecve.com/cve/CVE-2025-55126.htmlWed, 17 Jun 2026 09:41:18 +0000MEDIUM 6.5: HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages, with campaign names being the vector for the stored XSS