Severity High Analysis Summary CVE-2016-10735; CVE-2018-14040; CVE-2018-14042; CVE-2018-20676; CVE-2019-8331; CVE-2020-11022; CVE-2020-11023 Multiple vulnerabilities due to cross-site scripting exist in the Energy Saving Data Collecting Server (EcoWebServerIII), […]

Severity Medium Analysis Summary CVE-2022-22349 IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI configuration […]

Severity Medium Analysis Summary CVE-2022-22944 VMware Workspace ONE Boxer is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by calendar event descriptions. A […]

Severity High Analysis Summary CVE-2022-20650 Cisco INX-OS Software could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by command injection vulnerability […]

Severity High Analysis Summary CVE-2022-0517 Mozilla VPN could allow a local authenticated attacker to gain elevated privileges on the system, caused by an uncontrolled OpenSSL search […]

Severity High Analysis Summary CVE-2022-24288 Apache Airflow could allow a remote attacker to execute arbitrary commands on the system, caused by improper input validation by the […]

Severity High Analysis Summary A Vietnam-based threat group, APT32 (OceanLotus Group) is active since 2014. It is known for carrying out sophisticated attacks on several private […]

Severity High Analysis Summary Ursnif banking trojan also known as Gozi and Dreambot has been around for more than 10 years. It gained popularity in 2015 […]

Severity High Analysis Summary In the year 2013, a research team extracted a set of advanced backdoors which used code obfuscation, TCP SYN packets, self-destruction design, […]