agentprime: mykiot-kiotviet-syncEvery new CVE for mykiot-kiotviet-sync.https://agentprime.io/CVE-2025-12675: KiotViet Sync <= 1.8.5 - Missing Authorization to Authenticated (Subscriber+) Settings Updatehttps://agentprime.io/advisories/CVE-2025-12675/https://agentprime.io/advisories/CVE-2025-12675/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 07:27:56 GMTCVECVE-2025-12676: KiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization Bypasshttps://agentprime.io/advisories/CVE-2025-12676/https://agentprime.io/advisories/CVE-2025-12676/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 07:27:56 GMTCVECVE-2025-12674: KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2025-12674/https://agentprime.io/advisories/CVE-2025-12674/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 07:27:56 GMTCVEcriticalCVE-2025-12677: KiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key Exposurehttps://agentprime.io/advisories/CVE-2025-12677/https://agentprime.io/advisories/CVE-2025-12677/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 07:27:55 GMTCVE