Security Advisory: news, advisories and analysis, page 8

Coverage, page 8

• 

  Threats·Cloud & SaaSCritical

  QNAP HybridDesk Station OS Command Injection Flaw Disclosed

  An OS command injection vulnerability has been reported to affect HybridDesk Station.

  CST Editorial Desk15 Oct 20267 min read
• 

  Threats·Cloud & SaaSCritical

  FluentCRM WordPress Plugin Privilege Escalation Flaw Disclosed

  Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM:…

  CST Editorial Desk15 Oct 20267 min read
• 

  Threats·Cloud & SaaSCritical

  AhsayCBS Backup Server Command Injection Exploited in Attacks

  A flaw has been found in Ahsay AhsayCBS up to 10.3.2.

  CST Editorial Desk15 Oct 20267 min read
• 

  Threats·Cloud & SaaSCritical

  Mitsubishi Electric GENESIS Password Recovery Flaw Puts SCADA Accounts at Risk

  Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions…

  CST Editorial Desk15 Oct 20267 min read
• 

  Threats·Cloud & SaaSCritical

  Mitsubishi Electric GENESIS64 and ICONICS Suite Privilege Assignment Flaw Disclosed

  Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior,…

  CST Editorial Desk15 Oct 20267 min read