CVE-2020-15343

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API.Read More ...

Continue Reading
CVE-2020-15344

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API.Read More ...

Continue Reading
CVE-2020-15345

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API.Read More ...

Continue Reading
CVE-2020-15346

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key.Read More ...

Continue Reading
Information Disclosure

Rancher is vulnerable to information disclosure. Confidential information such as passwords and API keys are stored in kubernetes objects using plaintext which allows an attacker with read permission ...

Continue Reading

CVSS3 - MEDIUM

Information Disclosure

strapi is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization of the attributes within admin API responses allowing an attacker to exploit the vulnerability us ...

Continue Reading
[SECURITY] Fedora 36 Update: libofx-0.10.7-2.fc36

This is the LibOFX library. It is a API designed to allow applications to very easily support OFX command responses, usually provided by financial institutions. See https://www.ofx.net/ofx/default.as ...

Continue Reading
APT28 attack uses old PowerPoint trick to download malware

Researchers at Cluster25 have [published research]() about exploit code that's triggered when a user moves their mouse over a link in a booby-trapped PowerPoint presentation. The code starts a PowerSh ...

Continue Reading

Back to Main

Subscribe for the latest news: