Fortinet Warns of Severe SQLi Vulnerability in FortiClientEMS Software

March 14, 2024The Hacker NewsVulnerability / Network Security Fortinet has warned of a critical security flaw impacting its FortiClientEMS software that could allow attackers to achieve code execution on affected systems. “An improper neutralization of special elements used in an SQL Command (‘SQL Injection’) vulnerability [CWE-89] in FortiClientEMS may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted requests,” the company said in an advisory. The vulnerability, tracked as CVE-2023-48788, carries a CVSS rating of 9.3 out of a maximum of 10. It impacts the following versions – FortiClientEMS 7.2.0 through 7.2.2 (Upgrade to 7.2.3 or…Continue Reading

Nothing Phone 2a receives its first software update: Check what’s fixed

On March 5, Nothing Phone (2a) made its debut in the Indian market, captivating smartphone enthusiasts with its array of features. Following its launch, the device hit the shelves on March 12, offering consumers a choice between three RAM and storage configurations and two elegant color variants. Exciting news arrived as the much-anticipated NothingOS 2.5.3 update commenced its rollout for Nothing Phone (2a) users. In a detailed community post, the company outlined the myriad enhancements accompanying this update, particularly focusing on refining the camera experience. Users can now revel in the enhanced Ultra HDR feature and the XDR display effect…Continue Reading