X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner

OffSequence

@[email protected]

OffSeq is a cybersecurity company enhancing organizational digital resilience through comprehensive protection against evolving cyber threats. We offer specialized services for businesses of all sizes, with particular expertise in Baltic, Scandinavian, Belgian markets and EU regulatory compliance.

Open remote profile ↗
Posts

CVE-2026-77933 (CRITICAL, CVSS 9.3): DB-GPT <=0.8.2 ships with hardcoded MySQL root credentials in docker-compose.yml & exposes port 3306. Remote attackers can gain full DB access. Change credentials & restrict port now. https://radar.offseq.com/threat/cve-2026-77933-use-of-default-credentials-in-eosphoros-ai-db-gpt-bfef4b198f4b1032 #OffSeq #vuln #infosec #docker

Critical threat: CVE-2026-77933: Use of Default Credentials in eosphoros-ai DB-GPT
OffSeq Threat RadarCVE-2026-77933: Use of Default Credentials in eosphoros-ai… | Threat RadarDB-GPT versions up to 0.8.2 have a vulnerability due to hardcoded default credentials in the default docker-compose.yml file. This configuration sets a static…
↩ Reply ♡ 0 · ↻ 0 ↗ Original

CVE-2026-112371: CRITICAL code injection in H3C Magic NX15 (CVSS 9.4). Public exploit allows remote code execution via /api/esps. No patch yet — restrict device access. Details: https://radar.offseq.com/threat/cve-2026-112371-code-injection-in-h3c-magic-nx15-047130e6380b2198 #OffSeq #H3C #infosec #vulnerability

Critical threat: CVE-2026-112371: Code Injection in H3C Magic NX15
OffSeq Threat RadarCVE-2026-112371: Code Injection in H3C Magic NX15 | Threat RadarCVE-2026-112371 is a critical code injection vulnerability in the H3C Magic NX15 NX15V100R017 device. The flaw exists in the write function of the /api/esps…
↩ Reply ♡ 0 · ↻ 0 ↗ Original