技术前沿

KnowSafe 安全预警：TerraMaster TOS path 远程代码执行漏洞

Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inje…

2020-12-25 0 阅读 KnowSafe 安全团队

技术前沿

KnowSafe 安全预警：TerraMaster TOS < 4.2.07 未授权远程代码执行漏洞

An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in …

2020-12-24 0 阅读 KnowSafe 安全团队

技术前沿

KnowSafe 安全预警：zyxel <=4.60 默认口令漏洞

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The p…

2020-12-23 0 阅读 KnowSafe 安全团队

技术前沿

KnowSafe 安全预警：Apache ShardingSphere 默认口令漏洞

Apache ShardingSphere 是一套开源的分布式数据库中间件解决方案组成的生态圈，它由JDBC、Proxy 和 Sidecar（规划中）这3 款相互独立，却又能够混合部署配合使用的产品组成。Apache ShardingSph…

2020-12-22 0 阅读 KnowSafe 安全团队

技术前沿

KnowSafe 安全预警：SCO Openserver 5.0.7/6.0 'outputform' 命令注入

Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in ou…

2020-12-19 0 阅读 KnowSafe 安全团队

技术前沿

KnowSafe 安全预警：HPE Systems Insight Manager 7.6 远程权限提升漏洞

A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerabili…

2020-12-19 0 阅读 KnowSafe 安全团队