Hikvision Improper Authentication Vulnerability (CVE-2017-7921)
Analysis of CVE-2017-7921 affecting multiple Hikvision products, focusing on privilege escalation risks and the verification of vendor-supplied mitigations.
Read analysis →Vulnerability Assurance / Intelligence
Author: Vulnerability Assurance Research Desk
Rockwell Logix Controller Key Discovery Vulnerability (CVE-2021-22681)
Analysis of CVE-2021-22681, where insufficient protected credentials in Studio 5000 Logix Designer may allow unauthorized applications to connect to Logix controllers.
Read analysis →Apple Use-After-Free Vulnerability CVE-2023-43000
Analysis of a memory corruption vulnerability affecting macOS, iOS, iPadOS, and Safari 16.6 triggered by crafted web content.
Read analysis →Apple WebKit Integer Overflow (CVE-2021-30952)
Analysis of an integer overflow vulnerability affecting Safari and multiple Apple operating systems that could allow arbitrary code execution via crafted web content.
Read analysis →Kernel Privilege Risk in Apple iOS and iPadOS (CVE-2023-41974)
Analysis of CVE-2023-41974, a use-after-free vulnerability in iOS and iPadOS that could allow arbitrary code execution with kernel privileges.
Read analysis →Command Injection in Broadcom VMware Aria Operations (CVE-2026-22719)
Analysis of a command injection vulnerability in VMware Aria Operations that allows unauthenticated remote code execution during support-assisted product migrations.
Read analysis →Qualcomm Chipset Memory Corruption (CVE-2026-21385)
Analysis of CVE-2026-21385, a memory corruption vulnerability in multiple Qualcomm chipsets involving memory allocation alignments, now listed as known exploited by CISA.
Read analysis →Cisco SD-WAN Path Traversal and Privilege Escalation (CVE-2022-20775)
Analysis of CVE-2022-20775, a path traversal vulnerability in the Cisco SD-WAN application CLI that allows authenticated local attackers to gain root privileges.
Read analysis →Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass (CVE-2026-20127)
An authentication bypass in Cisco Catalyst SD-WAN Controller and Manager could allow remote attackers to obtain administrative privileges and manipulate network fabric configurations via NETCONF.
Read analysis →OS Command Injection in Soliton Systems K.K FileZen (CVE-2026-25108)
Analysis of CVE-2026-25108, an OS command injection vulnerability in Soliton Systems K.K FileZen that allows authenticated users to execute arbitrary commands via crafted HTTP requests.
Read analysis →