Advisories
All advisories from modzero. Also read our Disclosure Policy.
[MZ-25-02] Synology Active Backup for Microsoft 365
June 27, 2025
SynoOauth leaked credentials allowing unauthorized access to Microsoft Entra tenants using “Active Backup for Microsoft 365” (ABM)
[MZ-25-01] Via Browser for Android
February 27, 2025
Via Browser was affected by a universal Cross-Site Scripting (uXSS) issue
[MZ-24-01] MailCleaner
April 29, 2024
Unauthenticated Command Injection and Cross-Site Scripting (XSS) vulnerabilities in MailCleaner
[MZ-23-01] Poly VoIP Devices
December 29, 2023
Several vulnerabilities in Poly VoIP devices
[MZ-22-03] Passwordstate
December 19, 2022
Multiple high severity vulnerabilities in Passwordstate by Click Studios
[MZ-22-02] CrowdStrike FalconSensor
August 22, 2022
Uninstall Protection Bypass for CrowdStrike Falcon Sensor
1 of 2
Next ⟶