search
CERT.pl
Trends
- 1Critical XXE Vulnerability Found in Sparx Enterprise Architect●(cert.pl) Critical XXE Vulnerability in Sparx Systems Enterprise Architect Enables Arbitrary File Read In brief - This a
Poland's cybersecurity agency CERT.pl has disclosed a critical vulnerability in Sparx Systems Enterprise Architect, a modeling software widely used by enterprises and government bodies. The flaw, an XML External Entity (XXE) issue, lets attackers read arbitrary files on affected systems. Security professionals are warning users to patch and reviewing where the tool is deployed.
- 2Critical Vulnerabilities Found in Slican Telephone Exchanges●(cert.pl) Critical Vulnerabilities in Slican Telephone Exchanges: Hardcoded Keys, SQL Injection, and Plaintext Password
Poland's cyber security agency CERT Polska has published advisories for Slican telephone exchanges, describing critical flaws including hardcoded encryption keys, SQL injection, and passwords stored in plaintext. The vulnerabilities could let attackers gain access to affected phone systems. Security researchers and administrators are circulating the warnings, urging organisations using the equipment to update or mitigate promptly.