A security vulnerability has been found in MLflow, a common tool for managing machine learning projects on hosted servers. This is a server-side request forgery (SSRF) flaw, a type of issue that lets external attackers send unauthorized requests through the affected service.When exploited, this vulnerability allows bad actors to trick MLflow into ...
Continue reading
A security flaw has been identified in TrueConf Server, where a critical high-risk function does not require proper authentication to access. This means unapproved users can reach the function without a valid login or permission.An attacker with network access to the server's 4307/TCP port can exploit this flaw to run custom scripts on the server ...
Continue reading
A code injection vulnerability has been identified in TrueConf Server, a service some hosting clients run on their accounts. This flaw allows outside actors to send malicious, specially designed input to the server to manipulate its internal operations.An unauthorized remote attacker with network access to your server’s 4307/TCP port could ...
Continue reading
A security flaw has been identified in the Zimbra Collaboration Suite (ZCS), a common platform for business email, shared calendars, and team collaboration tools.This is an operating system command injection vulnerability. It can be exploited by an attacker who does not have a valid login to your Zimbra account: they only need to send specially ...
Continue reading
