Comparison Overview
Majorel
Majorel
Luxembourg, LU
Last Update: 01/04/2026
Majorel has been acquired by TP allowing us to deliver even more exceptional services in more locations worldwide and on a greater scale than ever before. We deliver the most advanced, digitally-powered business services to help the world’s best brands streamline their...
VFS Global
Unit 201, Level 2, Gate Village 8, DIFC, P.O. Box 114100, Dubai, AE
Last Update: 16/07/2026
As the global leader in trusted technology services, empowering secure mobility for governments and citizens, VFS Global embraces technological innovation including Generative AI to support governments and diplomatic missions worldwide. VFS Global continuously transform...
Compliance Ranges Comparison
Majorel
VFS Global
Benchmark & Cyber Underwriting Signals
Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)
Majorel has 41.52% fewer incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)
VFS Global has 0.99% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - Majorel (X = Date, Y = Severity)
Majorel cyber incidents detection timeline including parent company and subsidiaries.
Incident History - VFS Global (X = Date, Y = Severity)
VFS Global cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Majorel
VFS Global
FAQ
Latest Global CVEs
A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to resolve this issue. Patch name: 393255e7302ae5503331d45802e2eee01c6a47fe. You should upgrade the affected component.
- https://github.com/appwrite/appwrite/
- https://github.com/appwrite/appwrite/commit/393255e7302ae5503331d45802e2eee01c6a47fe
- https://github.com/appwrite/appwrite/pull/13995
- https://github.com/appwrite/appwrite/releases/tag/2.4.0
- https://github.com/godzeo/vulhub/issues/2
- https://vuldb.com/cve/CVE-2026-108770
- https://vuldb.com/submit/958017
- https://vuldb.com/vuln/416552
- https://vuldb.com/vuln/416552/cti
Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.
A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.