The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware ...
Continue ReadingJune 19, 2023
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware ...
Continue ReadingJune 19, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injection.This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; AP ...
Continue ReadingJune 19, 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injection.This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; AP ...
Continue ReadingJune 19, 2023
**The MOVEit Vulnerabilities and Latest Exploits. Impact On Governmental Agencies And Large Organizations** Governmental agencies and large organizations around the world are being hit by ransomware a ...
Continue ReadingJune 16, 2023
Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify ...
Continue ReadingJune 16, 2023
L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000ââ¬â¢s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit t ...
Continue ReadingJune 16, 2023
OMICARD EDMââ¬â¢s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary ...
Continue ReadingJune 16, 2023
[![MOVEit Transfer App](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() Progress Software on Thursday [disclosed]() a third vulne ...
Continue ReadingJune 16, 2023
Welcome to our May API newsletter, recapping some of the events of last month. As the old proverb goes, _April showers bring May flowers_ â and this means the bees at the Wallarm hive have been i ...
Continue ReadingJune 15, 2023
[![](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() A suspected China-nexus threat actor dubbed **UNC4841** has been linked to t ...
Continue ReadingJune 15, 2023