Topic
310 articles
CMS SecurityImproper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The…
Threat IntelAn SQL injection vulnerability has been discovered in TSG Profleet.
OT / SCADACritical infrastructure vulnerability advisory issued by CISA ICS-CERT impacting industrial automation systems and IEC 62443 security boundaries.
CMS SecurityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups…
Agentic AIArchon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API,…
Threat IntelSignificant Data Fiduciaries face financial penalties up to ₹250 Crore for failing to institute reasonable security safeguards, with mandatory breach…
Threat IntelBMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as…
Palo AltoA remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with…
Threat IntelMacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over…
Threat IntelJuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin…
Active ExploitA vulnerability was detected in Ahsay AhsayCBS up to 10.3.2.
Threat IntelEnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs.
Threat IntelThe EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication.
Active ExploitThis is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data…
CMS SecurityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL…
Threat IntelA path traversal vulnerability has been reported to affect Qsirch.
CiscoA vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write…
Threat IntelAn OS command injection vulnerability has been reported to affect HybridDesk Station.
CMS SecurityIncorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM:…
Active ExploitA flaw has been found in Ahsay AhsayCBS up to 10.3.2.
OT / SCADAWeak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions…
Threat IntelIncorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior,…