61 matches found
PT-2025-50120
Name of the Vulnerable Software and Affected Versions Fortinet FortiSOAR PaaS versions 7.3 through 7.6.2 Fortinet FortiSOAR on-premise versions 7.3 through 7.6.2 Description An unverified password change issue exists that may allow an attacker with existing access to a user account to reset the...
Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise 安全漏洞
Fortinet FortiSOAR PaaS and Fortinet FortiSOAR on-premise are both security orchestration, automation and response software from Fortinet, Inc. A security vulnerability exists in Fortinet FortiSOAR PaaS and Fortinet FortiSOAR on-premise that stems from insufficient password change validation, whi...
Hackers Access SonicWall Cloud Firewall Backups, Spark Urgent Security Checks
SonicWall on Wednesday disclosed that an unauthorized party accessed firewall configuration backup files for all customers who have used the cloud backup service. "The files contain encrypted credentials and configuration data; while encryption remains in place, possession of these files could...
EUVD-2019-6141
Malware in sbrugna...
EUVD-2018-1036
Malware in sbrugna...
EUVD-2017-3787
Malware in sbrugna...
EUVD-2025-22544
Malicious code in bioql PyPI...
CVE-2025-6260
The embedded web server on the thermostat listed version ranges contain a vulnerability that allows unauthenticated attackers, either on the local area network or from the Internet via a router with port forwarding set up, to gain direct access to the thermostat's embedded web server and reset us...
CVE-2025-6260
The embedded web server on the thermostat listed version ranges contain a vulnerability that allows unauthenticated attackers, either on the local area network or from the Internet via a router with port forwarding set up, to gain direct access to the thermostat's embedded web server and reset us...
PT-2025-30692 · Unknown · Network Thermostat X-Series
Name of the Vulnerable Software and Affected Versions: Network Thermostat X-Series WiFi Thermostats affected versions not specified Description: The embedded web server on the thermostat contains an issue that allows unauthenticated attackers, either on the local area network or from the Internet...
Network Thermostat X-Series WiFi thermostats 访问控制错误漏洞
Network Thermostat X-Series WiFi thermostats is a WiFi only thermostat from Network Thermostat, Inc. An access control error vulnerability exists in Network Thermostat X-Series WiFi thermostats that stems from an embedded web server that allows an unauthorized attacker to reset user credentials b...
CVE-2024-22168
A Cross-Site Scripting XSS vulnerability on the My Cloud, My Cloud Home, SanDisk ibi, and WD Cloud web apps was found which could allow an attacker to redirect the user to a crafted domain and reset their credentials, or to execute arbitrary client-side code in the user’s browser session to carry...
CVE-2014-5093
Status2k does not remove the install directory allowing credential reset...
Fortinet Releases Advisory on New Post-Exploitation Technique for Known Vulnerabilities
Fortinet is aware of a threat actor creating a malicious file from previously exploited Fortinet vulnerabilities CVE-2024-21762, CVE-2023-27997, and CVE-2022-42475 within FortiGate products. This malicious file could enable read-only access to files on the device's file system, which may include...
CVE-2021-26091
A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Based Encryption service of FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to infer parts of users authentication tokens and reset thei...
CVE-2021-26091
A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Based Encryption service of FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to infer parts of users authentication tokens and reset thei...
CVE-2024-22168
CVE-2024-22168 is an XSS vulnerability affecting Western Digital My Cloud, My Cloud Home, SanDisk ibi, and WD Cloud web apps. The issue could allow an attacker to redirect users to a crafted domain and reset credentials or run arbitrary client-side code in the user’s browser session. Root cause i...
Multiple Western Digital Products Cross-Site Scripting Vulnerability
Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in multiple Western Digital products that stems from the presence of a cross-site scripting XSS vulnerability that could allow an attacker to redirect a user to a crafted domain and...
Why CISA is Warning CISOs About a Breach at Sisense
The U.S. Cybersecurity and Infrastructure Security Agency CISA said today it is investigating a breach at business intelligence company Sisense, whose products are designed to allow companies to view the status of multiple third-party online services in a single dashboard. CISA urged all Sisense...