On February 23, 2021, VMware had released risk notices for the vCenter Server and ESXi. VMware fixed two high-risk vulnerabilities in ESXi and vSphere Client (HTML5). Malicious attackers with access to network ports can...
In an online study published this week, an anonymous security researcher claimed that they discovered that Brave Tor mode is sending queries for the .onion domain to public Internet DNS resolvers instead of Tor...
Recently, Google has released guidelines on coordinated vulnerability disclosure in open source projects, aiming to popularize knowledge related to open source security, which “was originally designed to help open source projects coming out of...
On February 9, 2021, Microsoft February Patch Tuesday fixes a local privilege escalation vulnerability (CVE-2021-1732) in Windows systems. Local attackers can use this vulnerability to elevate system privileges. This vulnerability is used by the...
NextGen Gallery is a WordPress plugin used to create image libraries. It currently has more than 800,000 valid installations. Recently, The development team of NextGen Gallery has now resolved the two serious CSRF vulnerabilities...
On February 9, 2021, Microsoft issued a risk notice for Windows TCP/IP remote code execution vulnerabilities. The vulnerability number is CVE-2021-24074. The vulnerability CVSS:3.0 score is 9.8 / 8.5. There is a remote code...
Apache Ambari is a software project of the Apache Software Foundation. Ambari enables system administrators to provision, manage and monitor a Hadoop cluster, and also to integrate Hadoop with the existing enterprise infrastructure. Ambari...
According to Claroty’s latest report, industrial control system vulnerabilities disclosed in the second half of 2020 increased by 25% year-on-year and 33% more than the first half of 2020. 71% of the disclosed industrial...
Previously, Google proposed a framework for responding to open source software vulnerabilities. After that, Google launched Open Source Vulnerabilities (OSV) project. OSV is a vulnerability database and triage infrastructure for open source projects aimed at helping...
Microsoft has just launched Microsoft Edge 88.0.705.63 to users of the stable channel. This version is a security update mainly used to fix known security vulnerabilities. Earlier, the Microsoft security team and the Google...
On February 4, 2021, the South Korean security company ENKI released a follow-up analysis of the allegedly Lazarus organization’s attack on security researchers. Mentioned that by sending MHTML files to induce the target person...
On February 4, 2021, SonicWall issued a risk notice for SSL-VPN SMA products, the vulnerability number is CVE-2021-20016. The vulnerability score CVSS v3 is 9.8. There is a serious program logic error in the...
Earlier we mentioned that hacker groups pretended to be security researchers on Twitter to attract other security researchers and tried to launch cyber attacks. The purpose of these hackers is to impersonate researchers to...
IBM officially released a security announcement on January 27. Some versions of IBM QRadar SIEM have high-risk vulnerabilities (CVE-2020-4888). Remote attackers can use this vulnerability to execute arbitrary commands on the system. The exploit...
Apache ActiveMQ is the most popular open-source, multi-protocol, Java-based messaging server. It supports industry-standard protocols so users get the benefits of client choices across a broad range of languages and platforms. Recently, Apache issued a...
Druid is a high-performance real-time analytics database. Druid’s main value add is to reduce time to insight and action. Druid is designed for workflows where fast queries and ingest really matter. Druid excels at...
