Apple Use-After-Free Vulnerability CVE-2023-43000
Analysis of a memory corruption vulnerability affecting macOS, iOS, iPadOS, and Safari 16.6 triggered by crafted web content.
Read analysis →Vulnerability Assurance / Intelligence
Category: Uncategorized
Rockwell Logix Controller Key Discovery Vulnerability (CVE-2021-22681)
Analysis of CVE-2021-22681, where insufficient protected credentials in Studio 5000 Logix Designer may allow unauthorized applications to connect to Logix controllers.
Read analysis →Hikvision Improper Authentication Vulnerability (CVE-2017-7921)
Analysis of CVE-2017-7921 affecting multiple Hikvision products, focusing on privilege escalation risks and the verification of vendor-supplied mitigations.
Read analysis →Qualcomm Chipset Memory Corruption (CVE-2026-21385)
Analysis of CVE-2026-21385, a memory corruption vulnerability in multiple Qualcomm chipsets involving memory allocation alignments, now listed as known exploited by CISA.
Read analysis →Command Injection in Broadcom VMware Aria Operations (CVE-2026-22719)
Analysis of a command injection vulnerability in VMware Aria Operations that allows unauthenticated remote code execution during support-assisted product migrations.
Read analysis →Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass (CVE-2026-20127)
An authentication bypass in Cisco Catalyst SD-WAN Controller and Manager could allow remote attackers to obtain administrative privileges and manipulate network fabric configurations via NETCONF.
Read analysis →Cisco SD-WAN Path Traversal and Privilege Escalation (CVE-2022-20775)
Analysis of CVE-2022-20775, a path traversal vulnerability in the Cisco SD-WAN application CLI that allows authenticated local attackers to gain root privileges.
Read analysis →OS Command Injection in Soliton Systems K.K FileZen (CVE-2026-25108)
Analysis of CVE-2026-25108, an OS command injection vulnerability in Soliton Systems K.K FileZen that allows authenticated users to execute arbitrary commands via crafted HTTP requests.
Read analysis →Roundcube Webmail SVG-Based XSS (CVE-2025-68461)
Analysis of a cross-site scripting vulnerability in Roundcube Webmail involving the animate tag in SVG documents, including required versions for remediation and validation strategies.
Read analysis →Roundcube Webmail Remote Code Execution (CVE-2025-49113)
A deserialization vulnerability in Roundcube Webmail allows authenticated users to achieve remote code execution via the upload.php component.
Read analysis →