Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Aug 29, 2024

1 new incident, 0 with updates.

Started

  • ClosedPatched

    Progress WhatsUp Gold SQL Injection

    Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user. Added to the CISA KEV catalog on 2024-09-16. CISA lists known use in ransomware campaigns.

    Progress WhatsUp GoldClosed Sep 16, 2024