Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Eibiz i-Media Server Digital Signage 3.8.0 lets unauthenticated users change user roles via its AMF endpoint. No fix is confirmed, so restrict access.
Sony IPELA cameras before firmware 1.88.00 have a critical stack overflow in ftpclient.cgi. Update to 1.88.00 or later and keep cameras off the internet.
D-Link DNS-343 ShareCenter firmware up to 1.05 allows unauthenticated root command injection via Mail_Test. The product is end of life, so replace it.
Several D-Link DIR routers (firmware 1.03) allow unauthenticated root command execution through service.cgi. The models are end of life, so replace them.
The resin-doc webapp in Caucho Resin allows unauthenticated file reads through path traversal. Remove resin-doc from every production Resin server.
PCMan FTP Server up to 2.0.7 has a remotely reachable buffer overflow in its PORT handler. No fix is confirmed, so restrict or replace the server.
AMTT HiBOS has an unauthenticated command injection in server_ping.php. No vendor fix is confirmed, so restrict access and contact AMTT directly.
D-Link DSP-W215 firmware 1.02 has a critical stack overflow in my_cgi.cgi that needs no login. No fix is confirmed, so isolate or replace the device.
The command.php handler on D-Link DIR-300 rev B and DIR-600 rev B routers allows unauthenticated root shell access. Replace unsupported units.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
