Posts by Igal Zeifman

• Emerging Threats

A memory corruption flaw in SAP’s Extended Passport processing lets an unauthenticated attacker execute operating system commands as the SAP system account, giving full control of the underlying host.

• Emerging Threats

An unauthenticated file read flaw in MikroTik RouterOS WebFig lets a remote attacker traverse out of the web namespace and read root-owned configuration files, including stored credentials.

• Emerging Threats

An unrestricted file upload flaw in elFinder lets an attacker slip PHP files past MIME filtering during ZIP extraction, achieving remote code execution on the underlying web server.

• Emerging Threats

A path traversal flaw in Next.js lets an unauthenticated attacker redirect a cache write outside its directory on Windows-hosted servers, reaching remote code execution on the host.

• Emerging Threats

A stored cross-site scripting flaw in Atlassian Confluence Data Center and Server lets an unauthenticated attacker run script in a privileged user’s browser and act on their behalf.

• Emerging Threats

A flaw in the core of Oracle WebLogic Server lets a low-privileged attacker with T3 or IIOP network access take over the server and reach adjacent systems.

• Emerging Threats

An unauthenticated SQL injection in GeoServer’s jsonArrayContains filter function lets attackers inject arbitrary SQL through public WMS and WFS endpoints, reaching remote code execution on privileged database hosts.

• Emerging Threats

A code injection flaw in GitLab’s GraphQL directive handling lets unauthenticated attackers modify or delete public projects and user data on self-managed instances.

• Emerging Threats

An improper authentication flaw in FortiWeb’s remote RADIUS admin group handling lets an unauthenticated attacker log in to the appliance’s management interface and take administrative control.

• Emerging Threats

An incorrect authorization flaw in Adobe Commerce and Magento Open Source lets an unauthenticated attacker switch a customer session to another account, exposing the victim’s personal data.