Cisco Security Advisories سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۰:۳۵

Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL st…

آسیب‌پذیری و روز صفر پایگاه داده سیستم‌عامل امنیت وب و نرم‌افزار

خواندن متن کامل در Cisco Security Advisories درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

BleepingComputer پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۰:۲۸

Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. [...]

آسیب‌پذیری و روز صفر

منبع

TechCrunch Security پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۰:۰۶

Hackers stole DreamHost customer files and inboxes during months-long attack

The web host said hackers exploited a vulnerability to access customer emails and files during a "deliberate attack."

آسیب‌پذیری و روز صفر

منبع

AWS Security Bulletins چهارشنبه ۱۳ آبان ۱۴۰۵ · ۲۳:۱۰

CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard

Bulletin ID: 2026-169-AWS Publication Date: 11/04/2026 11:30 AM PST Description: We identified CVE-2026-122192, an issue in Firecracker v0.23.0 through v1.16.1 that, under certain host memory conditions, can let a root user in a guest read or modify memory of the Firecracker process. It affects VMs restored from a snapshot using the File memory backend with a balloon or virtio-mem device. Impacted versions: Firecrack…

آسیب‌پذیری و روز صفر توسعه وب رایانش ابری

منبع

Canadian Centre for Cyber Security چهارشنبه ۱۳ آبان ۱۴۰۵ · ۲۲:۵۶

MongoDB security advisory (AV26-1122)

پایگاه داده

منبع