Blog | DIVD CSIRT

Kaseya Full Disclosure 04 April 2022, by Frank Breedijk

We are disclosing the full details of the vulnerabilities we found in Kaseya VSA in June of 2021

SmarterTrack limited disclosure 12 March 2022, by Finn van der Knaap

Limited disclosure of vulnerabilities we discovered in SmarterTrack

Auth bypass in SAP 08 February 2022, by Patrick Hulshof

Unauthenticated user impersonation (auth bypass) in SAP Posted on 08 February 2022.

XSS Zeroday in Zimbra 07 February 2022, by Boaz Braaksma

A new Zero-day XSS Vulnerability in Zimbra was published on the internet on the third of February 2022.

DIVD is a CVE Numbering Authority 01 February 2022, by Frank Breedijk

DIVD is accepted into the CVE Community as a CVE Numbering Authority (CNA), for vulnerabilities we discover or vulnerabilities reported to us that fall outside the scope of other CNAs

Update Apache log4j2 remote code execution 14 December 2021, by Jeroen van de Weerd

Update Apache log4j2 remote code execution

Apache log4j2 remote code execution 10 December 2021, by Ralph Horn

Apache fixes actively exploited logging component remote code excution zero-day

NMAP script for GitLab CVE-2021-22205 27 November 2021, by Frank Breedijk

We have release an NMAP script to test for GitLab CVE=2021-22205

GitLab Unauthenticated RCE Flaw 11 November 2021, by Jeroen van de Weerd

Gitlab released versions 13.10.3, 13.9.6, and 13.8.8 for GitLab Community Edition (CE) and Enterprise Edition (EE).

SolarWinds N-able N-central 04 November 2021, by Thomas van Voorst

DIVD scanning for vulnerable N-able servers