Recent Items
IXON VPN Client CRLF Injection
Published on Fri, 04 Sep 2026 21:19:02 +0000
Inductive Automation Ignition Incorrect Default Permissions
Published on Fri, 04 Sep 2026 21:10:25 +0000
Tycon Systems TPDIN-Monitor-WEB3 Missing Authorization
Published on Fri, 04 Sep 2026 21:01:16 +0000
Tycon Systems TPDIN-Monitor-WEB3 Cross-Site Request Forgery
Published on Fri, 04 Sep 2026 20:58:57 +0000
Tycon Systems TPDIN-Monitor-WEB3 Use of Hard-coded Credentials
Published on Fri, 04 Sep 2026 20:55:41 +0000
Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in with the hardcode credentials to obtain a root shell, enabling direct reading, writing, and deletion of data on ASUS Control Center, as well as remote control of all servers, PCs, and workstations within…
Published on Fri, 04 Sep 2026 02:08:54 +0000
Code Execution Vulnerability in Arena®
Published on Thu, 03 Sep 2026 13:10:28 +0000
Use of Weak Credentials
Published on Thu, 03 Sep 2026 11:27:56 +0000
A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 9.24 compatible) (All versions < V3.6.27). Affected versions of the module do not properly validate the SAML response signature. This could allow unauthenticated remote attackers to hijack an account (session) in specific SSO configurations.
Published on Thu, 03 Sep 2026 11:25:10 +0000
Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud
Published on Wed, 02 Sep 2026 14:47:25 +0000