On September 10, Adobe officially released the September security update, which fixes multiple vulnerabilities in Adobe’s various products, including Adobe Application Manager and Adobe Flash Player. Vulnerability Overview: Adobe Application Manager Adobe has released...
The Google Chrome development team has now launched a new version of the stable channel, Chrome 77.0.3865.75 which contains a number of fixes and improvements. Other aspects are mainly to fix known security vulnerabilities....
More and more parents now choose to buy smartwatches for children. Most of these smartwatches can be used to make calls and track the location of children in real-time. However, the whereabouts of children...
Security researcher Christian August Holm Hansen disclosed a remote command execution vulnerability in Nexus Repository Manager 2.X. The vulnerability has a deployment permission account by default. After successful login, you can use “createrepo” or...
The well-known penetration testing framework Metasploit recently added a utilization module for the high-risk vulnerability BlueKeep in its exploitation modules. BlueKeep is numbered CVE-2019-0708, a high-risk vulnerability discovered in May this year. It is...
Recently, Linux’s mail transfer agent Exim was exposed to a remote code execution vulnerability (CVE-2019-15846) caused by accepting TLS connections, potentially allowing attackers to gain root-level access to the system “by sending an SNI...
Researchers at Trend Micro’s Zero Day Initiative revealed a 0-day privilege vulnerability in the Android operating system that allowed attackers with low access rights on affected devices to further increase their privileges. The vulnerability...
Researchers of the security company SafeBreach recently discovered a security vulnerability (CVE-2019-8461) in the anti-virus software company Check Point. The affected product is the Endpoint Security Initial Client software used on Windows devices, which...
At the end of last month, Google Chrome pushed the emergency security update to fix the browser vulnerability. At the time, the Google Chrome blog did not disclose the specific details of the vulnerability....
Atlassian Confluence officially issued a security notice to fix a local file disclosure vulnerability (CVE-2019-3394) that exists in Confluence. The vulnerability level is serious. Atlassian Confluence Server and Atlassian Data Center are products of...
Google Project Zero found that the iPhone had 14 security vulnerabilities that had existed for two years. Google said that users only need to visit a malicious website which allows hackers to get information,...
Several Ghostscript-dSAFER sandbox bypass vulnerabilities (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817) were reported. Ghostscript is a suite of software providing an interpreter for Adobe Systems’ PostScript (PS) and Portable Document Format (PDF) page description languages. Its...
Cisco officially released an announcement to fix an authentication bypass vulnerability (CVE-2019-12643) in the REST API virtual service container of Cisco IOS XE software. The cause of the vulnerability is that the code that...
The Google Project Zero team just released a proof-of-concept video of the iMessage vulnerability, confirming that the bug would allow an attacker to access files on an iOS device. At the Black Hat Security...
Recently, a researcher announced a heap buffer overflow vulnerability (CVE-2019-14378) that exists in the QEMU simulator SLiRP network implementation. An attacker could exploit the vulnerability to compromise the QEMU process on the host, resulting...
Researcher detected multiple vulnerabilities in the Pulse Secure SSL VPN. These vulnerabilities can exploit the vulnerability to read arbitrary files including plaintext passwords, account information, and session information, as well as execute system commands....
