https://pwn.watch/i/progress-whatsup-gold-cve-2024-6670 Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user. Added to the CISA KEV catalog on 2024-09-16. CISA lists known use in ransomware campaigns. en Mon, 16 Sep 2024 00:00:00 GMT https://pwn.watch/i/progress-whatsup-gold-cve-2024-6670 https://pwn.watch/i/progress-whatsup-gold-cve-2024-6670#2024-09-16-53f6f58d Mon, 16 Sep 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/progress-whatsup-gold-cve-2024-6670 https://pwn.watch/i/progress-whatsup-gold-cve-2024-6670#2024-08-29-6c298357 Thu, 29 Aug 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-6670">Source</a></p>