On August 22, 2019, the Trend Micro research team released the Squid Proxy Server Buffer Overflow Vulnerability Analysis Report numbered CVE-2019-12527. Attackers can construct packets without authentication to exploit this vulnerability to create remote...
F-Secure’s hardware security team found two vulnerabilities in Xilinx Zynq UltraScale+ SoCs, one of which could not be patched by updating security patches. The affected products include ZynqUltraScale + series system-on-chip (SoC), multi-processor system-on-chip...
French security researcher Pierrick Gaudry found that the Moscow blockchain voting system, which is scheduled to be used next month, has serious vulnerabilities and can calculate the private key based on the public key....
Recently, the Cisco Talos team released several technical analysis that Aspose.cells and Aspose.words in Aspose products have remote code execution vulnerabilities. Attackers can make a malicious file to exploit related vulnerabilities and remotely execute...
Recently, Lilith Wyatt and Claudio Bozzato from the Cisco Talos research team found eight vulnerabilities in Google Nest Cam IQ indoor networking camera (version 4620002), including three denial-of-service (DoS) vulnerabilities, two code execution Vulnerabilities...
Due to a newly discovered vulnerability in the Bluetooth standard, hackers may weaken the encryption of Bluetooth devices and then snoop on the communication or take over the device. This bug does not directly...
Yesterday, Microsoft has pushed this month’s routine cumulative update to various products to fix various vulnerabilities, but there is a known security vulnerability that Microsoft has not fixed. In view of this Google security...
On August 13, a researcher from the vxrl vulnerability-lab published a remote code execution vulnerability (CVE-2019-14422) found in TortoiseSVN. The vulnerability is caused by TortoiseSVN’s URI handler (Tsvncmd:) which allows custom diff operations on...
The Netflix security team teamed up with Google, CERT/CC to disclose the problem of the Distributed-Denial of Service attack vulnerability in the implementation of the HTTP/2 protocol in various middleware services. Many of the...
Recently, Adobe officially released the August security update, which fixes multiple vulnerabilities in Adobe’s various products, including Adobe Photoshop CC, Adobe Experience Manager, Adobe Acrobat and Reader, Adobe Creative Cloud Desktop Application, and Adobe...
Today Microsoft released a series of patches for Remote Desktop Services, including two key RCE vulnerabilities: CVE-2019-1181 and CVE-2019-1182 . Similar to the previously fixed “BlueKeep” vulnerability ( CVE-2019-0708 ), these two vulnerabilities can also achieve “wormable” effects, which means that malware can exploit these vulnerabilities and...
Microsoft released the August security update patch on Tuesday, fixing 95 security issues ranging from simple spoofing attacks to remote code execution. Products include Active Directory, HTTP/2, Microsoft Bluetooth Driver, Microsoft Browsers, Microsoft Dynamics,...
An independent researcher, Vasily Kravets found a loophole in the steam game platform. Kravets said that all Windows versions of the Steam client exist this vulnerability, which allows hackers to escalate privilege on the...
McAfee researchers recently revealed that there is a remote code execution vulnerability called CVE-2009-0692 in the VOIP solution provider developed by Avaya. An attacker could exploit the vulnerability to hijack the phone’s normal operations,...
Artifex officially submitted a fix for the merged Bug 701394 on the master branch of Ghostscript. Designed to fix CVE-2019-10216 vulnerability. The vulnerability can bypass the Ghostscript security sandbox directly, allowing an attacker to...
At present, information security issues are becoming more and more prominent. After the Spectre and Meltdown are found, computer hardware vulnerabilities have gradually become the focus of information security researchers. Recently, a network security...
