Stan Plasmeijer
CSIRT Operations Lead
CSIRT cases
- DIVD-2026-00003 - Mendix Applications – Data Exposure due to Authorization Misconfiguration
- DIVD-2025-00041 - Victim Notification Operation Endgame S03E01
- DIVD-2025-00038 - Found webshells in FreePBX due to RCE vulnerability
- DIVD-2025-00035 - Sharepoint Mass-Exploitation (ToolShell) through CVE-2025-53770
- DIVD-2025-00018 - Victim Notification Operation Endgame 2.0
Show more Show less
- DIVD-2025-00017 - Authentication Bypass and Remote Code Execution in Ivanti EPMM
- DIVD-2025-00010 - Stack-based buffer overflow in Ivanti Connect Secure
- DIVD-2025-00007 - Authentication bypass in CrushFTP service
- DIVD-2024-00052 - Remote code execution in Cleo Harmony, VLCTrader and LexiCom
- DIVD-2024-00050 - Path traversal vulnerabilty in Mitel MiCollab
- DIVD-2024-00049 - Vulnerabilities in D-Link NAS: Backdoor and Command Injection Exploits
- DIVD-2024-00044 - Missing authentication in Fortinet FortiManager fgfmsd
- DIVD-2024-00041 - Progress Software WhatsUp Gold SQL Injection Authentication Bypass
- DIVD-2024-00040 - Zimbra Collaboration (ZCS) vulnerable for RCE under specific conditions
- DIVD-2024-00039 - Incorrect authorization vulnerability in Apache OFBiz resulting in RCE
- DIVD-2024-00038 - Remote Code Execution CUPS
- DIVD-2024-00033 - ServiceNow - unauthenticated remote code execution (RCE)
- DIVD-2024-00032 - Unauthenticated Remote Code Execution (RCE) vulnerability in Geoserver
- DIVD-2024-00030 - Zyxel NAS - unauthenticated OS command injection
- DIVD-2024-00028 - Local File Inclusion in SolarWinds U-Serv
- DIVD-2024-00026 - Unauthenticated RCE in Rejetto HTTP File Server
- DIVD-2024-00023 - Authentication Bypass Vulnerability in Progress Telerik Report Server
- DIVD-2024-00021 - Local File Inclusion in Check Point Security Gateway software
- DIVD-2024-00020 - Authentication Bypass in GitHub Enterprise Server (GHES)
- DIVD-2024-00018 - Out-Of-Bounds memory read vulnerability in Citrix Netscaler and Gateway
- DIVD-2024-00016 - Command injection vulnerabilities in QNAP devices
- DIVD-2024-00015 - Remote Command Execution in CrushFTP
- DIVD-2024-00013 - Palo Alto PAN-OS Command Injection Vulnerability in GlobalProtect
- DIVD-2024-00010 - Unauthenticated Command Injection In Progress Kemp LoadMaster
- DIVD-2024-00008 - Authentication Bypass and Remote Code Execution in ConnectWise ScreenConnect
- DIVD-2024-00002 - Account takeover vulnerability in Gitlab CE/EE
- DIVD-2023-00039 - VMware vCenter Server RCE
- DIVD-2023-00022 - OS command injection vulnerability of Zyxel firewalls
- DIVD-2023-00011 - FortiNAC and FortiWeb RCE Vulnerability
- DIVD-2023-00009 - Cisco RV Series Remote Command Execution
- DIVD-2023-00006 - Unauthenticated code injection in QNAP QTS and QuTS hero
- DIVD-2022-00060 - Command Injection vulnerability in Bitbucket Server and Data Center
CVE Records
- Authentication Bypass in Danfoss AK-SM800A
- Webreport disclosure to unauthorized actor in Danfoss AK-EM 100
- OS Command Injection in Danfoss AK-EM 100
- Local File Inclusion in Danfoss AK-EM 100
- Reflected Cross-Site Scripting in Danfoss AK-EM 100