Read more https://thehackernews.com/2025/07/cisa-warns-sysaid-flaws-under-active.html
CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF
The U.S. Cybersecurity and Infrastructure Security Agency (CISA)
added two security flaws impacting SysAid IT support software to
its Known Exploited Vulnerabilities (KEV) catalog, based on
evidence of active exploitation. The vulnerabilities in question
are listed below - CVE-2025-2775 (CVSS score: 9.3) - An improper
restriction of XML external entity (XXE) reference vulnerability in
the
Pensée du jour :
Ce que l'homme a fait ,
l'homme peut le défaire.
"No secure path in the world"
