What is the official website of Salesforce.org ?

The official website of Salesforce.org is http://www.salesforce.org.

What is Salesforce.org's cybersecurity risk score?

Salesforce.org has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Salesforce.org experienced?

According to Rankiteo, Salesforce.org currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Salesforce.org been affected by any supply chain cyber incidents ?

According to Rankiteo, Salesforce.org has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Salesforce (Incident ID: ALLSALFARTRA1789577043) Salesforce (Incident ID: SALMCK1787948754) Resecurity (Incident ID: CISRESMICAMASERSALGIT1786868753) ServiceNow (Incident ID: SALSERCON1786602506) Salesforce (Incident ID: BRI1785435859) Klue (Incident ID: HUNSALKLU1781793603) Oracle (Incident ID: ORA1781526596) Snowflake (Incident ID: DEN1779855877) Salesforce (Incident ID: CHA1779582281) Oracle (Incident ID: SALORAEAS1781684937) Salesforce (Incident ID: CARADTSALCUS1778027258) Okta (Incident ID: ADT1777286874) Salesforce (Incident ID: PANADTSAL1777328877) Salesforce (Incident ID: ADT1777062235) Anodot by Glassbox (Incident ID: CARHOLPRI1776630318) Salesforce (Incident ID: KEM1776831908) Salesforce (Incident ID: MCGSAL1776191039) Salesforce (Incident ID: WYN7-E1779114946) Salesforce (Incident ID: WEASAL1778732635) Aqua Security (Incident ID: AQUUSEAMASALCIS1775046662) LiteLLM AI Gateway (Incident ID: AQU1774671948) Mixpanel (Incident ID: ZEN1774628650) Salesforce (Incident ID: INFSAL1774362301) Salesforce (Incident ID: BER1776292480) Salesforce (Incident ID: LOC1774283448) Amazon Web Services (AWS) (Incident ID: SALAMAMICPINRED1774269319) okta (Incident ID: NOROKTSAL1773854168) Salesforce (Incident ID: SAL1773146972) Salesforce Experience Cloud (Incident ID: SALLASAMDSNOSONOKT1773153462) Salesforce (Incident ID: SALHAL1775967850) Salesforce (Incident ID: TIFLVMCHR1770865579) Salesforce (Incident ID: EURODI1770907059) okta (Incident ID: OKTSALGOO1769222214) Agentforce Marketing (Incident ID: SALFOR1778063116) Salesforce (Incident ID: PLADRA1774449041) Salesforce (Incident ID: COU1764518078) Drift, a Salesloft company (Incident ID: SAL4794547112625) Salesforce (Incident ID: GAI1122911112425) Salesforce (Incident ID: SAL5592855100325) Salesforce (Incident ID: SAL2862828092525) Cisco (Incident ID: SAL5732257091825) Salesloft (Incident ID: DRI514090325) Salesforce Experience Cloud (Incident ID: ENTSAL1773088371) Salesforce (Incident ID: DRI635082925) Salesforce (Incident ID: SALFAR1767922939) Salesforce (Incident ID: WOR1768679649) Salesforce (Incident ID: TRA1021410090425) moveIT Software (Incident ID: ORA4202442101025) Salesforce (Incident ID: SAL0562205100825) Salesforce (Incident ID: SALODI1772484824) Salesforce (Incident ID: GRU1768529823) Salesforce (Incident ID: GRU1769118538) Salesforce (Incident ID: LOUPARVOLTIFJAP1770908674) Salesforce (Incident ID: THEINGSALJAGORASYNDAV1769095448) Salesforce (Incident ID: QILCYBSALHALPLA1768955694) Salesforce (Incident ID: SALGOO1781576985)

Does Salesforce.org have SOC 2 Type 1 certification ?

According to Rankiteo, Salesforce.org is not certified under SOC 2 Type 1.

Does Salesforce.org have SOC 2 Type 2 certification ?

According to Rankiteo, Salesforce.org does not hold a SOC 2 Type 2 certification.

Does Salesforce.org comply with GDPR ?

According to Rankiteo, Salesforce.org is not listed as GDPR compliant.

Does Salesforce.org have PCI DSS certification ?

According to Rankiteo, Salesforce.org does not currently maintain PCI DSS compliance.

Does Salesforce.org comply with HIPAA ?

According to Rankiteo, Salesforce.org is not compliant with HIPAA regulations.

Does Salesforce.org have ISO 27001 certification ?

According to Rankiteo,Salesforce.org is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Salesforce.org operate in ?

Salesforce.org operates primarily in the Software Development industry.

How many employees does Salesforce.org have ?

Salesforce.org employs approximately 7 people worldwide.

Does Salesforce.org own any subsidiaries ?

Salesforce.org presently has no subsidiaries across any sectors.

How many LinkedIn followers does Salesforce.org have ?

Salesforce.org's official LinkedIn profile has approximately 151,139 followers.

What is the NAICS classification code for Salesforce.org ?

Salesforce.org is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Salesforce.org have a Crunchbase profile ?

No, Salesforce.org does not have a profile on Crunchbase.

Does Salesforce.org have a LinkedIn profile ?

Yes, Salesforce.org maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/salesforce-org.

How many cybersecurity incidents has Salesforce.org experienced ?

As of October 5, 2026, Rankiteo reports that Salesforce.org has experienced 77 cybersecurity incidents.

How many peer or competitor companies does Salesforce.org have ?

Salesforce.org has an estimated 31,072 peer or competitor companies worldwide.

What types of cybersecurity incidents has Salesforce.org faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Vulnerability, Ransomware and Cyber Attack.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Salesforce.org

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

Salesforce.org Vendor Cyber Rating & Cyber Score

salesforce.org

Add Your Compliance Badge

Salesforce.org

Salesforce.org CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Salesforce

Vulnerability

100

9/2026

Salesforce

ALLSALFARTRA178...

Salesforce

Cyber Attack

9/2026

OPESNOSALHUG178...

Salesforce

Breach

100

8/2026

Salesforce

SALMCK178794875...

Agentforce Marketin...

Vulnerability

8/2026

SALHOU178697329...

Salesforce

Breach

8/2026

Resecurity

CISRESMICAMASER...

Salesforce Experien...

Vulnerability

8/2026

ServiceNow

SALSERCON178660...

Salesforce

Breach

8/2026

AMASAL178601233...

Salesforce

Vulnerability

8/2026

SAL1790332225

Salesforce

Breach

7/2026

Salesforce

BRI1785435859

Salesforce

Cyber Attack

6/2026

Klue

HUNSALKLU178179...

Salesforce

Vulnerability

100

6/2026

Oracle

ORA1781526596

Salesforce

Breach

5/2026

Snowflake

DEN1779855877

Salesforce

Breach

5/2026

Salesforce

CHA1779582281

Salesforce

Vulnerability

5/2026

Oracle

SALORAEAS178168...

Salesforce

Breach

5/2026

SAL1786285485

Salesforce

Cyber Attack

5/2026

Salesforce

CARADTSALCUS177...

Salesforce

Cyber Attack

4/2026

GOOSAL177791964...

Salesforce

Cyber Attack

4/2026

SAL1777395283

Salesforce

Cyber Attack

100

4/2026

Okta

ADT1777286874

Salesforce

Breach

4/2026

Salesforce

PANADTSAL177732...

Salesforce

Breach

4/2026

Salesforce

ADT1777062235

Salesforce

Breach

4/2026

Anodot by Glass...

CARHOLPRI177663...

Salesforce

Breach

4/2026

Salesforce

KEM1776831908

Salesforce

Vulnerability

4/2026

SAL1776299258

Salesforce

Breach

4/2026

Salesforce

MCGSAL177619103...

Salesforce

Vulnerability

4/2026

SAL1776084470

Salesforce

Breach

4/2026

Salesforce

WYN7-E177911494...

Salesforce

Vulnerability

4/2026

Salesforce

WEASAL177873263...

Salesforce

Vulnerability

100

4/2026

Aqua Security

AQUUSEAMASALCIS...

Salesforce

Vulnerability

100

3/2026

LiteLLM AI Gate...

AQU1774671948

Salesforce

Ransomware

100

3/2026

Mixpanel

ZEN1774628650

Salesforce

Breach

3/2026

Salesforce

INFSAL177436230...

Salesforce

Breach

100

3/2026

Salesforce

BER1776292480

Salesforce

Cyber Attack

100

3/2026

Salesforce

LOC1774283448

Salesforce

Vulnerability

100

3/2026

Amazon Web Serv...

SALAMAMICPINRED...

Salesforce

Breach

100

3/2026

okta

NOROKTSAL177385...

Salesforce

Breach

3/2026

Salesforce

SAL1773146972

Salesforce Experien...

Breach

3/2026

Salesforce Expe...

SALLASAMDSNOSON...

Salesforce

Breach

3/2026

Salesforce

SALHAL177596785...

Salesforce

Breach

2/2026

TOYOPTSAL177195...

Salesforce

Breach

2/2026

Salesforce

TIFLVMCHR177086...

Salesforce

Breach

2/2026

Salesforce

EURODI177090705...

Salesforce

Cyber Attack

1/2026

okta

OKTSALGOO176922...

Agentforce Marketin...

Vulnerability

1/2026

Agentforce Mark...

SALFOR177806311...

Salesforce

Cyber Attack

100

1/2026

SAL1768394538

Salesforce

Breach

1/2026

CYBIBMSALNETMIC...

Salesforce

Ransomware

100

1/2026

Salesforce

PLADRA177444904...

Salesforce

Breach

12/2025

Salesforce

COU1764518078

Salesforce

Breach

100

11/2025

Drift, a Salesl...

SAL479454711262...

Salesforce

Breach

11/2025

Salesforce

GAI112291111242...

Salesforce

Ransomware

100

10/2025

Salesforce

SAL559285510032...

Salesforce

Breach

100

9/2025

Salesforce

SAL286282809252...

Salesforce

Cyber Attack

100

9/2025

Cisco

SAL573225709182...

Salesforce

Cyber Attack

100

9/2025

Salesloft

DRI514090325

Salesforce Experien...

Breach

9/2025

Salesforce Expe...

ENTSAL177308837...

Salesforce

Breach

8/2025

Salesforce

DRI635082925

Salesforce

Vulnerability

100

8/2025

Salesforce

SALFAR176792293...

Salesforce

Breach

8/2025

Salesforce

WOR1768679649

Salesforce

Breach

7/2025

Salesforce

TRA102141009042...

Salesforce

Ransomware

100

7/2025

moveIT Software

ORA420244210102...

Salesforce.org

Cyber Attack

100

6/2025

SAL540255411062...

Salesforce

Cyber Attack

100

5/2025

Salesforce

SAL056220510082...

Salesforce

Vulnerability

5/2025

Salesforce

SALODI177248482...

Salesforce.org

Breach

3/2025

SAL313223110082...

Salesforce

Breach

2/2025

Salesforce

GRU1768529823

Salesforce

Breach

1/2025

Salesforce

GRU1769118538

Salesforce

Breach

1/2025

Salesforce

LOUPARVOLTIFJAP...

Salesforce

Ransomware

100

1/2025

Salesforce

THEINGSALJAGORA...

Salesforce.org

Cyber Attack

100

8/2024

SAL210212110042...

Salesforce

Cyber Attack

100

8/2024

SALARU177197435...

Salesforce.org

Cyber Attack

100

6/2024

SAL096210910082...

Salesforce

Ransomware

100

6/2024

Salesforce

QILCYBSALHALPLA...

Salesforce.org

Cyber Attack

100

5/2024

SAL500215010092...

Salesforce.org

Ransomware

100

10/2023

SAL560205610112...

Salesforce.org

Ransomware

100

6/2023

SAL423224210102...

Salesforce.org

Cyber Attack

05/2019

SAL215719323

Salesforce

Breach

1/2014

Salesforce

SALGOO178157698...

Loading…

A.I.

Salesforce.org Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Salesforce.org

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Salesforce.org in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Salesforce.org in 2026.

Incident Types Salesforce.org vs Software Development Industry Avg (This Year)

No incidents recorded for Salesforce.org in 2026.

Incident History - Salesforce.org (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Salesforce.org Subsidiaries

Salesforce.org

Software Development

Website: http://www.salesforce.org

Company Size: 201-500 employees

SalesforceSoftware Development

TrailheadIT Services and IT Consulting

Salesforce AdminsSoftware Development

Agentforce MarketingSoftware Development

Salesforce News & InsightsTechnology, Information and Internet

Loading…

Salesforce.org Similar Companies

Intuit

intuit.com

Intuit is a global technology platform that helps our customers and communities overcome their most important financial challenges. Serving millions of customers worldwide with TurboTax, QuickBooks, Credit Karma and Mailchimp, we believe that everyone should have the opportunity to prosper and we work tirelessly to find new, innovative ways to deliver on this belief. We encourage conversations on this page and will not delete comments that follow our terms of use. In order to keep this a safe community, the below posts may be removed: Repeated posts of the same content, spam or posts from fake accounts or profiles, offensive language or material, threats to others in the community, posts deliberately aimed to have a negative effect on the community or conversations.

OpenText

cb opentext.com

OpenText is a leading Cloud and AI company that provides organizations around the world with a comprehensive suite of Business AI, Business Clouds, and Business Technology. We help organizations grow, innovate, become more efficient and effective, and do so in a trusted and secure way—through Information Management. OpenText (NASDAQ/TSX: OTEX), founded in 1991 in Waterloo, has a rich history of helping customers manage their most important asset—information. Originating from a collaboration to digitize the Oxford English Dictionary, OpenText has grown into a global leader in information management. With over 120,000 enterprise customers across 180 countries, OpenText supports 98 of the top 100 global companies. A wide breadth of offerings uniquely positions OpenText to help customers unlock the value of that information using Al, cloud, and security innovations. At OpenText, our culture is at the heart of everything we do—and today, that includes being proudly AI-first. We’re creating a workplace where everyone can thrive, with artificial intelligence integrated into how we work, solve problems, and innovate together. By fostering a collaborative and inclusive environment, we empower digital knowledge workers and drive forward-thinking solutions that shape the future of information management. We believe our success comes from the strength of our team—talent that AI can’t replace—and we’re committed to attracting and supporting those who bring unique insight, adaptability, and creativity. Because at OpenText, people aren’t just our greatest asset—they’re the reason we shine in an AI-powered world. Join us at OpenText and become part of a team where your talents and ideas are truly valued.

Avaya

cb tinyurl.com

At Avaya, we give our customers the freedom to take their business in the directions that benefit them most. We provide the paths for both customers and their employees where every moment big and small can drive in the moment, memorable experiences. The journey is theirs at the pace that makes sense for them with the innovation without disruption they need now and the solutions they can invest in the future.

Baidu, Inc.

baidu.com

Baidu is a leading AI company with strong Internet foundation, driven by our mission to “make the complicated world simpler through technology”. Founded in 2000 as a search engine platform, we were an early adopter of artificial intelligence in 2010. Since then, we have established a full AI stack, from deep learning frameworks to models and applications, with industry-leading self-developed technology at every level. Over the past two decades, we have built a diversified portfolio of products and services, spanning an ecosystem of hundreds of millions of users, millions of developers, and hundreds of thousands of enterprises. We have now integrated our leading AI capabilities into our offerings, driving innovative use cases. Join us to shape the future of AI and technology. For media inquiries, contact us at [email protected]. For career opportunities, visit https://talent.baidu.com/static/index.html

Xiaomi Technology

mi.com

Xiaomi Corporation was founded in April 2010 and listed on the Main Board of the Hong Kong Stock Exchange on July 9, 2018 (1810.HK). Xiaomi is a consumer electronics and smart manufacturing company with smartphones and smart hardware connected by an IoT platform at its core. Embracing our vision of “Make friends with users and be the coolest company in the users’ hearts”, Xiaomi continuously pursues innovations, high-quality user experience and operational efficiency. The company relentlessly builds amazing products with honest prices to let everyone in the world enjoy a better life through innovative technology. Xiaomi is one of the world's leading smartphone companies. In December 2025, global monthly active users ( "MAU") reached 754.1 million. The company has also established the world’s leading consumer AIoT (AI+IoT) platform, reached 1079.2 million smart devices connected to its platform (excluding smartphones, laptops and tablets) as of December 31, 2025. Xiaomi products are present in more than 100 countries and regions around the world. In July 2025, Xiaomi was included in the Fortune Global 500 list for the seventh year in a row. Xiaomi is a constituent of the Hang Seng Index, Hang Seng China Enterprises Index, Hang Seng TECH Index and Hang Seng China 50 Index.

linkedin.com

Founded in 2003, LinkedIn connects the world's professionals to make them more productive and successful. With more than 1 billion members worldwide, including executives from every Fortune 500 company, LinkedIn is the world's largest professional network. The company has a diversified business model with revenue coming from Talent Solutions, Marketing Solutions, Sales Solutions and Premium Subscriptions products. Headquartered in Silicon Valley, LinkedIn has offices across the globe.

Red Hat

redhat.com

Red Hat is the world’s leading provider of enterprise open source solutions, using a community-powered approach to deliver high-performing Linux, hybrid cloud, edge, and Kubernetes technologies. We hire creative, passionate people who are ready to contribute their ideas, help solve complex problems, and make an impact. Opportunities are open. Join us.

Rakuten

cb rakuten.com

Rakuten Group, Inc. (TSE: 4755) is a global technology leader in services that empower individuals, communities, businesses and society. Founded in Tokyo in 1997 as an online marketplace, Rakuten has expanded to offer services in e-commerce, fintech, digital content and communications to 2 billion members around the world. The Rakuten Group has more than 30,000 employees, and operations in 30 countries and regions. For more information visit https://global.rakuten.com/corp/.

Groupon

cb greenhouse.io

Groupon is an experiences marketplace that brings people more ways to get the most out of their city or wherever they may be. By enabling real-time mobile commerce across local businesses, live events and travel destinations, Groupon helps people find and discover experiences––big and small, new and familiar––that make for a full, fun and rewarding life. Groupon helps local businesses grow and strengthen customer relationships––resulting in strong, vibrant communities. E-commerce never stands still, our transformation strategy, combined with our strong brand, customer base, and marketplace expertise, ensures we are constantly adapting to the evolving market landscape while delivering value for our customers and merchant partners. Groupon is on a radical journey to transform our business. To meet our aggressive goals we are in the process of building a culture that prioritises fast decisions, open communication, and relentless pursuit of results. In the spirit of transparency, things aren't perfect, there are still processes to change and bureaucracy to break so we need people who want to be on this journey with us. Check out our current opportunities with #TeamGroupon and join us on our exciting mission to become The Ultimate Destination For Local Experiences and Services.

Loading…

NEWS

Salesforce.org CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 10, 2026 10:15 PM

Cybercriminals Exploit Guest Access Flaws in Salesforce, ShinyHunters Claim Responsibility

A fresh cybersecurity threat has arrived involving Salesforce. The hacker group ShinyHunters has claimed to have run a campaign targeting...

Read Article

March 10, 2026 02:08 PM

Salesforce Experience Cloud misconfigurations exploited by ShinyHunters

Salesforce is alerting customers to a security issue affecting misconfigured Experience Cloud platforms, where hackers are exploiting guest...

Read Article

March 10, 2026 07:17 AM

Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool

Salesforce has warned of an increase in threat actor activity that's aimed at exploiting misconfigurations in publicly accessible Experience...

Read Article

March 10, 2026 04:13 AM

ShinyHunters Claims Ongoing Salesforce Aura Data Theft Attacks

ShinyHunters claims 300-400 companies hit in ongoing Salesforce Aura data theft via guest user flaws. Salesforce security fixes and attack details revealed.

Read Article

March 09, 2026 06:30 PM

ShinyHunters claims more high-profile victims in latest Salesforce customers data heist

ShinyHunters told The Register that it has stolen data from about 100 high-profile companies in its latest Salesforce customer data heist,...

Read Article

March 09, 2026 05:12 PM

ShinyHunters claims ongoing Salesforce Aura data theft attacks

Salesforce is warning customers that hackers are targeting websites with misconfigured Experience Cloud platforms that give guest users...

Read Article

January 13, 2026 08:00 AM

AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations

Google and Mandiant introduce AuraInspector, an open source tool for auditing Salesforce Aura endpoints and identifying data exposure risks.

Read Article

December 01, 2025 08:00 AM

Third-Party Breach Hits Salesforce via Gainsight App Integrations, Impacting Over 200 Organizations

Salesforce has confirmed another third-party breach affecting Gainsight applications integrated with customer instances, enabling attackers...

Read Article

November 30, 2025 08:00 AM

Week in review: Fake “Windows Update” fuels malware, Salesforce details Gainsight breach

Here's an overview of some of last week's most interesting news, articles, interviews and videos: Quantum encryption is pushing satellite...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-105222

SUMMARY

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is passed to CURLOPT_SSL_VERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests, steal the API key from the query string, and tamper with responses.

Published

Date2026-10-04

Updated

Date2026-10-04

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

cvss4

Base Score: 9.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

2.2

REFERENCES

CVE-2026-105221

SUMMARY

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/gist.rb sets VERIFY_NONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens and login credentials to read and modify the victim's gists.

Published

Date2026-10-04

Updated

Date2026-10-04

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

cvss4

Base Score: 9.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

2.2

REFERENCES

CVE-2026-105220

SUMMARY

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor window. Attackers can craft a story file whose script calls the twineElectron openWithScratchFile IPC bridge to write and open a .bat file, executing code as the user.

Published

Date2026-10-04

Updated

Date2026-10-04

RISK INFORMATION (Score: 7.8)

cvss3

Base Score: 7.8

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.5

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

1.8

REFERENCES

CVE-2026-105167

SUMMARY

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-04

Updated

Date2026-10-04

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-105166

SUMMARY

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the argument image-choice results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-04

Updated

Date2026-10-04

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Salesforce.org Vendor Cyber Rating & Cyber Score

Salesforce.org A.I CyberSecurity Scoring

Salesforce.org CyberSecurity News & History

Salesforce.org Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Salesforce.org

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Salesforce.org vs Software Development Industry Avg (This Year)

Incident History - Salesforce.org (X = Date, Y = Severity)

Salesforce.org Subsidiaries

Salesforce.org

Salesforce.org Similar Companies

Intuit

OpenText

Avaya

Baidu, Inc.

Xiaomi Technology

LinkedIn

Red Hat

Rakuten

Groupon

Salesforce.org CyberSecurity News

Cybercriminals Exploit Guest Access Flaws in Salesforce, ShinyHunters Claim Responsibility

Salesforce Experience Cloud misconfigurations exploited by ShinyHunters

Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool

ShinyHunters Claims Ongoing Salesforce Aura Data Theft Attacks

ShinyHunters claims more high-profile victims in latest Salesforce customers data heist

ShinyHunters claims ongoing Salesforce Aura data theft attacks

AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations

Third-Party Breach Hits Salesforce via Gainsight App Integrations, Impacting Over 200 Organizations

Week in review: Fake “Windows Update” fuels malware, Salesforce details Gainsight breach

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Salesforce.org CyberSecurity News & History

Salesforce.org Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Salesforce.org

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Salesforce.org vs Software Development Industry Avg (This Year)

Incident History - Salesforce.org (X = Date, Y = Severity)

Salesforce.org Subsidiaries

Salesforce.org

Salesforce.org Similar Companies

Intuit

OpenText

Avaya

Baidu, Inc.

Xiaomi Technology

LinkedIn

Red Hat

Rakuten

Groupon

Salesforce.org CyberSecurity News

Cybercriminals Exploit Guest Access Flaws in Salesforce, ShinyHunters Claim Responsibility

Salesforce Experience Cloud misconfigurations exploited by ShinyHunters

Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool

ShinyHunters Claims Ongoing Salesforce Aura Data Theft Attacks

ShinyHunters claims more high-profile victims in latest Salesforce customers data heist

ShinyHunters claims ongoing Salesforce Aura data theft attacks

AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations

Third-Party Breach Hits Salesforce via Gainsight App Integrations, Impacting Over 200 Organizations

Week in review: Fake “Windows Update” fuels malware, Salesforce details Gainsight breach

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo