Severity High Analysis Summary Apache Tomcat could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization when the […]

Severity High Analysis Summary The vulnerability is due to insufficient input validation of incoming DHCP traffic. An attacker could exploit this vulnerability by sending a crafted […]

Severity Medium Analysis Summary COVID-19 is being used in a variety of malicious campaigns including email spam, BEC, malware, ransomware, and malicious domains. As the number […]

Severity High Analysis Summary Threat actors are continuously creating more sophisticated ways for malware to evade defenses. Researchers have observed Netwalker’s usage of reflective loading techniques […]

Severity Medium Analysis Summary The vulnerability exists because the web-based management interface improperly validates user input for specific SQL queries. An attacker could exploit this vulnerability […]

Severity High Analysis Summary Cisco Unified Contact Center Express could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization […]

Severity Medium Analysis Summary A new Android malware leveraging a COVID-19 theme to infect devices and steal victim data. The distribution method used by this malware […]

Severity Medium Analysis Summary WolfRAT, a modified version of DenDroid. Based on strings in the code and C2 domain names, it appears that Thai users and […]

Severity Medium Analysis Summary Zoho ManageEngine Service Plus could allow a remote authenticated attacker to obtain sensitive information. By sending a getFileProtectionSettings call to AjaxServlet, a […]