PT-2025-7173

Name of the Vulnerable Software and Affected Versions: HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers affected versions not specified Description: The issue concerns Remote Code Execution and Elevation of Privilege when processing a PostScript print job. This could...

Hp LaserJet Pro Printer、HP LaserJet Enterprise和HP LaserJet Managed 安全漏洞

HP LaserJet Enterprise and others are products of Hewlett-Packard HP, U.S.A. HP LaserJet Enterprise is a multifunction printer.HP LaserJet Managed is a multifunction printer.Hp LaserJet Pro Printer is a laser printer. A security vulnerability exists in Hp LaserJet Pro Printer, HP LaserJet...

Hp LaserJet Pro Printer、HP LaserJet Enterprise和HP LaserJet Managed 安全漏洞

HP LaserJet Enterprise and others are products of Hewlett-Packard HP, U.S.A. HP LaserJet Enterprise is a multifunction printer.HP LaserJet Managed is a multifunction printer.Hp LaserJet Pro Printer is a laser printer. A security vulnerability exists in Hp LaserJet Pro Printer, HP LaserJet...

PT-2025-7171

Name of the Vulnerable Software and Affected Versions HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers affected versions not specified Description The issue concerns Remote Code Execution and Elevation of Privilege when processing a PostScript print job. It is estimated...

CVE-2025-26506: Stack-based Buffer Overflow

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job...

CVE-2025-26508: Out-of-bounds Write

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job...

CVE-2025-26507: Stack-based Buffer Overflow

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job...

Managed Databases as Code Using Terraform

...

Introducing Akamai Managed Service for API Security

...

Exploit for Relative Path Traversal in Fortinet Fortimanager

Fortimanager insufficient authorization checks CVE-2024-23666...

Managed Network Cloud Firewall: Comprehensive Protection for Network Attack Surface

...

4 Reasons Why MSPs & MSSPs Need to Enhance Attack Surface Management

In today’s rapidly evolving digital landscape, Managed Service Providers MSPs and Managed Security Service Providers MSSPs face increasing challenges. As businesses expand their digital footprints, MSPs and MSSPs are under pressure to deliver comprehensive security services while managing costs,...

CVE-2022-38757

A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions e.g., install a bundle on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone bu...

Qualys Unveils mROC: The Industry’s First Managed Risk Operation Center To Help Partners Scale Risk Management Services

The launch of Enterprise TruRisk Management ETM, the world’s first Risk Operations Center ROC in the cloud, in October 2024 has met with an overwhelmingly positive reception from customers. They see the potential of a unified approach to managing cyber risk. We recognize that setting up and...

Lumma Stealer’s GitHub-Based Delivery Explored via Managed Detection and Response

The Managed XDR team investigated a sophisticated campaign distributing Lumma Stealer through GitHub, where attackers leveraged the platform's release infrastructure to deliver malware such as SectopRAT, Vidar, and Cobeacon...

Gog editFilePost() Code Execution

The vulnerability of the editFilePost function in the Gogs self-managed Git repository creation tool is related to improper restrictions on the path name of the restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Missing authentication for managed device configuration files

...

Investigating A Web Shell Intrusion With Trend Micro™ Managed XDR

This blog discusses a web shell intrusion incident where attackers abused the IIS worker to exfiltrate stolen data...

Investigating A Web Shell Intrusion With Trend Micro™ Managed XDR

This blog discusses a web shell intrusion incident where attackers abused the IIS worker to exfiltrate stolen data...

GoCD 安全漏洞

GoCD is a continuous delivery server from GoCD Open Source. A security vulnerability exists in GoCD versions 18.9.0 through 24.4.0, which stems from a vulnerability that allows misuse of the backup configuration feature, which could potentially allow execution of arbitrary scripts on managed...