Skip to the content.
Home
/
DIVD CSIRT
Making the internet safer through Coordinated Vulnerability Disclosure
Menu
Home
DIVD
CSIRT
Cases
DIVD-2023-00017 - Cisco Small Business Router Authentication Bypass
Cisco RV016, RV042, RV042G and RV082 contain an authentication bypass vulne...
DIVD-2023-00016 - GLPI Remote Code Execution
GLPI version below 9.5.9 & 10.0.3 are vulnerable to Remote Code Execution...
DIVD-2023-00015 - Yeastar Configuration Panel Takeover
Yeastar N412 and N824 Configuration Panels are vulnerable to unauthenticate...
DIVD-2023-00014 - Critical Broken Authentication Flaw in Jira Service Manag
Vulnerable Jira Service Management Server and Data Center versions allow an...
DIVD-2023-00012 - Unauthenticated Remote Command Execution in IBM Aspera Fa
IBM Aspera Faspex 4.4.1 could allow a remote attacker to execute arbitrary ...
DIVD-2023-00011 - FortiNAC and FortiWeb RCE Vulnerability
Fortinet has released security updates for its FortiNAC and FortiWeb produc...
DIVD-2023-00010 - Remote Code Execution in Microsoft Exchange Server
Remote Code Execution vulnerability was found and fixed in Microsoft Exchan...
DIVD-2023-00009 - Cisco RV Series Remote Command Execution
Cisco RV340, RV340W, RV345 and RV345P contain a Remote Command Execution vu...
DIVD-2023-00007 - Global VMware ESXi Ransomware Attack
Criminals are attacking VMware ESXi servers vulnerable to CVE-2021-21974 wo...
DIVD-2023-00006 - Unauthenticated code injection in QNAP QTS and QuTS hero
QNAP has released an advisory for devices running QTS 5.0.1 and QuTS hero h...
DIVD-2023-00004 - Unauthenticated Remote Command Execution using SAML in Zo
Use of outdated Apache Santuario library in Zoho ManageEngine causes an una...
DIVD-2023-00003 - OS command injection in CentOS CWP
The login/index.php endpoint in CentOS Control Web Panel 7 before 0.9.8.114...
DIVD-2023-00002 - Publicly Reachable Malicious Webshells
DIVD is searching the Internet for publicly reachable malicious webshells....
DIVD-2023-00001 - Citrix systems vulnerable for CVE-2022-27510 and/or CVE-
Based on scanning data obtained from Fox-IT, DIVD is notifying owners of vu...
DIVD-2022-00065 - Multiple Critical Vulnerabilities in multiple Zyxel EOL d
Based on disclosure by Sec Consult, DIVD performed scans of end of life dev...
DIVD-2022-00064 - Multiple injection vulnerabilities identified within Axie
Multiple injection vulnerabilities have been identified within Axiell Iguan...
DIVD-2022-00063 - Memory overflow vulnerability in FortiOS SSL VPN
DIVD is scanning for parties vulnerable to CVE-2022-42475...
DIVD-2022-00061 - KNXNet/IP gateways often left open to the internet
DIVD is scanning for and notifying parties about KNXNet/IP gateways that ar...
DIVD-2022-00060 - Command Injection vulnerability in Bitbucket Server and D
DIVD is scanning for parties vulnerable to CVE-2022-43781...
DIVD-2022-00056 - Critical authentication bypass affecting Fortigate produc
DIVD is scanning for parties vulnerable to CVE-2022-40684...
All cases
CVEs
CVE-2023-22580 - Sequalize - Bad query filtering leading to SQL errors...
CVE-2023-22579 - Sequalize - Unsafe fall-through in getWhereConditions...
CVE-2023-22578 - Sequalize - Default support for “raw attributes” when using ...
CVE-2022-45052 - Local File Inclusion in Axiell Iguana CMS...
CVE-2022-45051 - Reflected POST XSS in Axiell Iguana CMS...
CVE-2022-45050 - Reflected XSS in Axiell Iguana CMS...
CVE-2022-45049 - Reflected XSS in Axiell Iguana CMS...
CVE-2022-41217 - Cloudflow - Unauthenticated file upload vulnerability...
CVE-2022-41216 - Cloudflow - Local File Inclusion Vulnerability...
CVE-2022-3901 - Visioweb.js - Prototype Pollution can results in XSS...
Blog
2023-02-24 : DIVD’s response regard the involvement of a DIVD volunteer in a major data ...
2023-01-18 : Fox-IT and DIVD cooperate to warn owners of vulnerable Citrix servers...
2022-12-14 : Fortinet sslvpnd vulnerability - update...
2022-12-13 : Fortinet SSL VPN Vulnerability...
2022-08-15 : Closing GeyNoise Ukraine Only case...
2022-08-10 : Itarian Full disclosure...
2022-08-09 : SmarterTrack Full disclosure...
2022-06-08 : ITarian critical vulnerabilities...
2022-06-03 : Confluence 0-day...
2022-04-04 : Kaseya Full Disclosure...
More...
Donate
Search...
RSS
Contact
Search