CVE-2025-3871: Missing Authorization

Broken access control in Fortra's GoAnywhere MFT prior to 7.8.1 allows an attacker to create a denial of service situation when configured to use GoAnywhere One-Time Password GOTP email two-factor authentication 2FA and the user has not set an email address. In this scenario, the attacker may ent...

Siemens SINEC INS 代码问题漏洞

Siemens SINEC INS is a software from Siemens, Germany, that provides centralized services for network infrastructures. Siemens SINEC INS suffers from an insufficient session expiration vulnerability that can be exploited by an attacker to continue executing malicious operations after his user...