CVE/vulnerability

QNAP Warns of DeadBolt Ransomware Attacks Exploiting a Zero-day Flaw

QNAP Systems, Inc found a new DEADBOLT ransomware attacks that exploits zero-day vulnerability in Photo Station. QNAP urges all QNAP…

2 years ago

Zyxel Format String Flaw Let Attackers Execute Unauthorized Remote Code

In a warning to its customers today, Zyxel has notified them of a vulnerability that poses a risk for RCE…

2 years ago

Hackers Use Open Redirect Vulnerabilities in Online Services to Deliver Phishing Content

Researchers at Resecurity noticed threat actors leveraging Open Redirect Vulnerabilities which is popular in online services and apps to evade…

2 years ago

Hackers Exploiting High-Severity Zimbra Flaw to Steal Email Account Credentials

Zimbra CVE-2022-27824 has been added to the CISA's "Known Exploited Vulnerabilities" catalog as a new vulnerability. Hackers are actively exploiting…

2 years ago

Critical SonicWall Vulnerability Allows SQL Injection – Patch Now!

A critical SQL injection (SQLi) vulnerability was recently patched by the network security company SonicWall as a result of a…

2 years ago

Cisco Nexus Dashboard Flaw Let Remote Attacker Execute Arbitrary Commands

The Cisco Nexus Dashboard data center management solution was found to have severe vulnerabilities that Cisco has addressed recently. The…

2 years ago

VMware vCenter Server Flaw Let Attacker Exploit to Perform Elevate Privileges Attack

There has finally been a patch released by VMware for an affected version of vCenter Server's IWA mechanism, eight months…

2 years ago

Critical Fortinet Flaws Patched – Following Products Affected

Fortinet, a cybersecurity company headquartered in Sunnyvale, California develops and sells cybersecurity solutions, such as physical firewalls, antivirus software, intrusion…

2 years ago

Critical PHP Flaws Allows Attackers to Execute Remote Code on QNAP NAS Devices

QNAP released a security advisory detailing the critical PHP vulnerabilities that allow an attacker to Remote Code on QNAP NAS…

2 years ago

Critical Flaws in MEGA Cloud Storage Let Attacker Decrypt User Data

The experts at one of Europe’s leading universities, ETH Zurich, Switzerland reported a critical vulnerability in MEGA cloud storage that…

2 years ago