Research shows a .NET proxy design flaw enables file writes and RCE through attacker-supplied WSDL in multiple products.
Static AES keys are enabling attackers to decrypt access tokens and reach remote code execution, triggering urgent patch ...