Actualités

septembre 29, 2017

UCOPIA solutions bring together a combination of software, appliance and cloud services serving small to large customers. More than 12,000 UCOPIA solutions are deployed and maintained by UCOPIA expert partners...

juin 5, 2017

Reported vulnerabilities are related to the following domains: moodstocks.com, withgoogle.com, and chromeexperiments.com.

mai 5, 2017

We found a CRLF injection vulnerability, combined with session fixation, in OpenVPN Access Server, a commercial component of the famous TLS VPN, open-source, software solution.

mai 3, 2017

We found multiple XSS vulnerabilities in ViMbAdmin, a Web front-end to manage virtual domains, mailboxes and aliases.

mai 3, 2017

We found multiple CSRF vulnerabilities in ViMbAdmin, a Web front-end to manage virtual domains, mailboxes and aliases.

mars 23, 2017

We found a file upload vulnerability in the Nuxeo CMS. Through the web interface, we managed to abuse the file upload vulnerability to execute arbitrary code and take over the...

mars 14, 2017

EyesOfNetwork ("EON") is an OpenSource network monitoring solution. We found an SQL injection vulnerability in the authenticated part of the application. Successful exploitation would lead to a complete database dump...

mars 14, 2017

EyesOfNetwork ("EON") is an OpenSource network monitoring solution. We found a vulnerability caused by incorrect filtering of inbound parameters of the Web component. It leads to remote code execution. In...

février 15, 2017

We found vulnerabilities on Riverbed appliance, and specifically in the way the secure vault is protecting TLS private keys. Such appliances are often found in sensitive environments, where they compress...

janvier 12, 2017

We found Multiple CSRF vulnerabilities in the administration interface of Zimbra, giving possibilities like adding, modifying and removing admin accounts.