
Sign up to save your podcasts
Or


QNAP has fixed six rsync vulnerabilities that could let attackers gain remote code execution on unpatched Network Attached Storage (NAS) devices.
SonicWall has released an urgent security advisory regarding a critical vulnerability in its SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC). Identified as CVE-2025-23006 with a CVSS score of 9.8, this pre-authentication remote command execution flaw poses a significant risk, enabling attackers to fully compromise vulnerable devices.
Security researcher Mehdi Elyassa from Synacktiv published the technical details and a proof-of-concept (PoC) exploit code for a critical vulnerability in Microsoft Configuration Manager (MCM), tracked as CVE-2024-43468, with a CVSS score of 9.8. This flaw allows unauthenticated attackers to exploit SQL injection vulnerabilities, enabling the execution of arbitrary commands on servers and their underlying databases.
Kibana, the popular open-source data visualization and exploration tool, has released a security update addressing two vulnerabilities, including one high severity flaw. The update, version 8.15.0, is available now and all users are strongly encouraged to upgrade their installations immediately.
From the publisher's feed