A newly identified vulnerability in Dassault Systèmes DELMIA Apriso could allow attackers to execute remote code, impacting users from Release 2020 to Release 2025.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
Research · Jun 1, 2025
Critical Vulnerability Discovered in RoundCube Webmail
A serious deserialization vulnerability has been identified in RoundCube Webmail, allowing authenticated users to execute remote code, posing significant security risks.
A newly identified vulnerability in TeleMessage TM SGNL raises concerns about insecure defaults in resource initialization, potentially exposing sensitive data.
A serious vulnerability has been identified in the Versa Concerto SD-WAN orchestration platform, allowing unauthorized access to administrative endpoints due to improper authentication.
A newly discovered command injection vulnerability in Smartbedded Meteobridge allows remote attackers to execute arbitrary commands with elevated privileges, posing significant security risks.
Research · May 12, 2025
Critical Path Traversal Vulnerability in Samsung MagicINFO 9 Server
A serious path traversal vulnerability has been identified in Samsung MagicINFO 9 Server, allowing unauthorized file access and modifications.
Research · May 12, 2025
Critical Deserialization Vulnerability Discovered in SAP NetWeaver
A serious deserialization vulnerability has been identified in SAP NetWeaver, potentially jeopardizing system security through malicious content uploads.
A serious vulnerability has been identified in SysAid On-Prem, affecting versions up to 23.3.40, potentially allowing unauthorized access and data exposure.
A serious directory traversal vulnerability has been identified in Srimax Output Messenger, potentially exposing sensitive files to attackers.
A significant vulnerability in the Linux kernel's ext4 filesystem has been addressed, enhancing system stability and security.
A significant vulnerability in the Linux kernel's SCTP implementation has been addressed, which could lead to potential race conditions affecting message delivery.
A serious vulnerability in SAP NetWeaver's Visual Composer Metadata Uploader could allow unauthorized file uploads, posing significant risks to system integrity and security.