Blog | DIVD CSIRT

ITarian critical vulnerabilities 08 June 2022, by Frank Breedijk

ITarian MSP platform and on-premise edition contain critical vulnerabilities. SaaS is patched, on-premise cannot be patched.

Confluence 0-day 03 June 2022, by Frank Breedijk

CVE-2022-26134 a 0-day RCE in Confluence

Kaseya Full Disclosure 04 April 2022, by Frank Breedijk

We are disclosing the full details of the vulnerabilities we found in Kaseya VSA in June of 2021

SmarterTrack limited disclosure 12 March 2022, by Finn van der Knaap

Limited disclosure of vulnerabilities we discovered in SmarterTrack

Auth bypass in SAP 08 February 2022, by Patrick Hulshof

Unauthenticated user impersonation (auth bypass) in SAP Posted on 08 February 2022.

XSS Zeroday in Zimbra 07 February 2022, by Boaz Braaksma

A new Zero-day XSS Vulnerability in Zimbra was published on the internet on the third of February 2022.

DIVD is a CVE Numbering Authority 01 February 2022, by Frank Breedijk

DIVD is accepted into the CVE Community as a CVE Numbering Authority (CNA), for vulnerabilities we discover or vulnerabilities reported to us that fall outside the scope of other CNAs

Update Apache log4j2 remote code execution 14 December 2021, by Jeroen van de Weerd

Update Apache log4j2 remote code execution

Apache log4j2 remote code execution 10 December 2021, by Ralph Horn

Apache fixes actively exploited logging component remote code excution zero-day

NMAP script for GitLab CVE-2021-22205 27 November 2021, by Frank Breedijk

We have release an NMAP script to test for GitLab CVE=2021-22205