Search InfoSecNexus
Search published blog posts, CVE notes, guides, and live briefings.
Security intelligence
Current analysis, verified advisories, and practical defensive guidance from the InfoSecNexus newsroom.
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.
Read briefing WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code...
Read briefing
F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated...
Read briefing N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.
Read briefing
Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request,...
Read briefing Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL)...
Read briefing Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable...
Read briefing Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of...
Read briefing TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break...
Read briefing Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.
Read briefing
