UGSDR A.I CyberSecurity Scoring
24/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Urbanscape Green Solutions - DACH Region in 2026.
No incidents recorded for Urbanscape Green Solutions - DACH Region in 2026.
No incidents recorded for Urbanscape Green Solutions - DACH Region in 2026.
wienerberger is one of the leading providers of innovative, ecological solutions for the entire building envelope, in the fields of new build and renovation, as well as infrastructure in water and energy management. With more than 20,000 employees worldwide, wienerberger's solutions enable energy-efficient, healthy, climate-friendly and affordable living. Since 1819, we have been improving people's lives. With over 200 production sites in 28 countries, wienerberger is the world’s largest producer of bricks and the market leader in clay roof tiles in Europe as well as concrete pavers in Eastern Europe. In pipe systems, the company is one of the leading suppliers in Europe and a leading supplier of facade products in North America. At the beginning of 2024, wienerberger successfully completed the acquisition of Terreal, becoming the leading European provider of innovative all-in roofing and solar solutions, as well as solutions for the entire building envelope in Europe and North America. Innovation, Operational Excellence, as well as M&A and Portfolio Optimization are the most important pillars of wienerberger’s sustainable growth. In our core markets, Europe and North America, we are continuously expanding our main segments: new construction, renovation, and infrastructure. Total revenues in 2024 € 4.5 billion Operating EBITDA € 760 million More on Career at wienerberger: https://www.wienerberger.com/en/career.html Privacy Policy of Wienerberger AG: https://www.wienerberger.com/en/info/privacy-policy.html Imprint of Wienerberger AG: https://www.wienerberger.com/en/info/Imprint.html
Renewal by Andersen is the window and door replacement subsidiary of Andersen Corporation, a company that’s revolutionized the window and door business for more than 120 years. Since 1903, Andersen Corporation has been known for its high-quality, innovative, and well-crafted products. Renewal by Andersen was created to build on this tradition and provide homeowners with a different and better experience when replacing their windows and doors. The strength of Renewal by Andersen is our people. We are a network united by this common goal: to make a difference in the lives of our homeowners, our colleagues, our families, and our communities. It is in our DNA. It’s part of who we are. We believe Renewal by Andersen can be a key piece of a life well-lived. Join our team of #DifferenceMakers and find the best opportunity for you at Renewal by Andersen: www.renewalbyandersen.com/careers Learn more at www.renewalbyandersen.com and follow us on Instagram (@renewalbyandersen) and Facebook (@RbACorp).
Latest updates, reports, and threat intel affecting the global network.
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists for a client (from a previous unexpired reset request), subsequent calls to the `reset_password` guest API endpoint reuse the existing token instead of generating a new one. The 15-minute validity window is anchored to the first request's `created_at` timestamp, not the time of the most recent email. An attacker who obtained the original reset link remains able to use it even after the victim requests a new reset, because the original token is never invalidated or rotated. Version 0.8.0 patches the issue. Some workarounds are available. Configure a reverse proxy (e.g., Nginx, Apache, Cloudflare) to apply per-IP rate limiting to the `/client/reset-password` endpoint to minimize the window of opportunity, and/or manually clear expired `client_password_reset` records from the database after a client reports a suspected compromise.
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has `staff.create_and_edit_staff` can call `/api/admin/staff/permissions_update` targeting their own account and write any permission structure, bypassing the intended role-based access control boundary. Version 0.8.0 patches the issue. Some workarounds are available. Restrict the `staff.create_and_edit_staff` permission to only highly trusted staff members and/or use a reverse proxy or WAF to restrict access to `/api/admin/staff/permissions_update` to specific trusted roles.
FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for orders that are no longer in an `active` state (e.g., `suspended`, `canceled`). The root cause is missing order-state validation in two client API endpoints, despite an `isActive()` helper already existing in the `Serviceapikey` module and the frontend UI correctly gating access on `order.status == 'active'`. Version 0.8.0 contains a fix. Some workarounds are available. If the `Serviceapikey` module is not needed, uninstall it to remove the affected endpoints. One may also use a reverse proxy or WAF to restrict access to `/api/client/order/service` and `/api/client/serviceapikey/reset` based on application-level order-state logic.
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API endpoints. The root cause is a combination of the `can_always_access` module flag (which grants all staff access to certain modules) and insufficient permission checks or unsafe parameter handling on individual endpoints. Version 0.8.0 contains a fix. Some workarounds are available. Restrict staff accounts to only those who need access to sensitive settings and/or use a reverse proxy or WAF to restrict access to the affected endpoints to trusted IP addresses or higher-privilege roles.
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in client with an unverified email address (`email_approved = 0`) can access all client-area pages (e.g. `/client/balance`, `/client/order/list`, `/client/invoice`) and read real account data, including wallet balances and transaction history. The API-side enforcement correctly restricts unverified clients to only profile-related endpoints, but the page-side enforcement is overly permissive, allowing any request whose path starts with `/client`. Version 0.8.0 contains a fix. No known workarounds that don't involve modifying the source code are available.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.