OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php) that allows authenticated administrators to execute arbitrary operating system commands by injecting PHP payloads into the categories database table. Attackers can chain arbitrary SQL execution to alter the ...
Continue reading
A security vulnerability has been identified in N-able N-central, a tool many organizations use to remotely manage and monitor their IT systems. This flaw creates an authentication bypass, meaning an attacker could skip normal login requirements to gain unauthorized access to accounts on the platform, potentially taking full control of those ...
Continue reading
A cybersecurity advisory was published on 20 July 2026 related to Microsoft SharePoint, following reports of new active exploits targeting the platform.
If you run Microsoft SharePoint on your hosting account for your website, team collaboration tools, or document storage, these active exploits mean your SharePoint setup faces higher risk of ...
Continue reading
A security advisory was published on 22 July 2026 regarding a vulnerability in Microsoft Active Directory Federation Services (AD FS), a tool commonly used to manage user authentication and access to websites, apps, and business systems.
The flaw, described as insufficient granularity of access control, means the service’s permission rules are ...
Continue reading
