A security flaw has been identified in AlanWeb SCADA, a software platform some website owners use for managing industrial control systems and related data. The flaw means the software does not properly enforce access restrictions for certain folders on systems running it, leaving those folders unprotected.
An attacker without authorized access to ...
Continue reading
We’re reaching out to share news of a security vulnerability identified in Metabase, a common tool many of our hosting clients use for database analytics and reporting tied to their websites.
The flaw is a SQL injection issue, which allows an unauthenticated remote attacker (someone with no existing login access to your Metabase instance) to ...
Continue reading
Microsoft has identified a security flaw in a core Windows system component called the Ancillary Function Driver for WinSock, which handles network and internet connection functions for Windows devices.
This is a "use-after-free" type of vulnerability, meaning an attacker who already has basic authorized access to the server can exploit it to gain ...
Continue reading
A security flaw has been identified in two Cisco firewall products: the Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD). This is a heap inspection vulnerability, a weakness in how the devices handle certain internal memory checks, and it can be exploited by a remote attacker with no existing login ...
Continue reading
