Recent Items
IXON VPN Client CRLF Injection
Published on 2026-09-04T21:19:02.213000+00:00
Updated on 2026-09-04T21:19:02.213000+00:00
Inductive Automation Ignition Incorrect Default Permissions
Published on 2026-09-04T21:10:25.580000+00:00
Updated on 2026-09-04T21:10:25.580000+00:00
Tycon Systems TPDIN-Monitor-WEB3 Missing Authorization
Published on 2026-09-04T21:01:16.030000+00:00
Updated on 2026-09-04T21:01:16.030000+00:00
Tycon Systems TPDIN-Monitor-WEB3 Cross-Site Request Forgery
Published on 2026-09-04T20:58:57.898000+00:00
Updated on 2026-09-04T20:58:57.898000+00:00
Tycon Systems TPDIN-Monitor-WEB3 Use of Hard-coded Credentials
Published on 2026-09-04T20:55:41.831000+00:00
Updated on 2026-09-04T20:55:41.831000+00:00
Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in with the hardcode credentials to obtain a root shell, enabling direct reading, writing, and deletion of data on ASUS Control Center, as well as remote control of all servers, PCs, and workstations within…
Published on 2026-09-04T02:08:54.416000+00:00
Updated on 2026-09-04T02:08:54.416000+00:00
Code Execution Vulnerability in Arena®
Published on 2026-09-03T13:10:28.638000+00:00
Updated on 2026-09-03T13:10:28.638000+00:00
Use of Weak Credentials
Published on 2026-09-03T11:27:56.383000+00:00
Updated on 2026-09-03T11:27:56.383000+00:00
A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 9.24 compatible) (All versions < V3.6.27). Affected versions of the module do not properly validate the SAML response signature. This could allow unauthenticated remote attackers to hijack an account (session) in specific SSO configurations.
Published on 2026-09-03T11:25:10.771000+00:00
Updated on 2026-09-03T11:25:10.771000+00:00
Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud
Published on 2026-09-02T14:47:25.341000+00:00
Updated on 2026-09-02T14:47:25.341000+00:00