Recently, Siemens officially issued a notice to fix various levels of security vulnerabilities in its various products. The affected products include SIMATIC WinCC OA, Spectrum Power, RUGGEDCOM RXO II and so on. It contains...
The default service included with Axis, StockQuoteService.jws contains a hard-coded HTTP URL that can be used to trigger HTTP requests. An attacker can use “an expired hardcoded domain that was used in a default...
On April 9th, Adobe officially released the April security update, which fixes multiple vulnerabilities in Adobe’s various products, including Adobe Flash player, Shockwave player, Dreamweaver, XD CC, InDesign, Experience Manager Forms, and Bridge CC....
Microsoft released the April Patch Tuesday on April 9. This security update fixed many vulnerabilities which cover the code execution/privilege escalation vulnerability of Windows and several core components of Windows (Windows, win32k, LUAFV, CSRSS,...
In February of this year, the Razer Blade series of laptops were exposed to firmware vulnerabilities related to Intel ME. The CVE number was CVE-2018-4251 and was originally discovered on Apple laptops prior to...
Security researchers report that hackers can exploit Intel VISA chip vulnerabilities to sniff host data through signals flowing through some computer system motherboards. The Intel technology is called Visualization of Internal Signals Architecture (VISA)...
A team of researchers from the Ben-Gurion University and the Soroka University Medical Center, Beer-Sheva, in Israel has proved that hackers can modify 3D medical scans, which can be added or removed from it....
Applications developed using the Qt5 GUI framework are vulnerable to remote code execution vulnerabilities. An attacker can exploit this vulnerability by configuring a custom protocol handler with a little-known command line argument. Many developers...
On April 1, the open source software Apache version 2.4.39 release, which fixed a privilege escalation vulnerability numbered CVE-2019-0211 and mod_auth_digest access control bypass vulnerability numbered CVE-2019-0217. According to CVE-2019-0211 analysis, the vulnerability impact...
Researchers at Università Ca’ Foscari Venezia in Venice, Italy, and Tu Wien University in Austria found that more than 10,000 top-level websites using HTTPS are still vulnerable due to cryptographic vulnerabilities. HTTPS (Hypertext Transfer...
This week, researchers at Google’s security lab fully disclosed the security vulnerabilities in the TP-Link SR20 home smart router. This vulnerability allows anyone to execute any command with the highest privilege of the system...
Security researchers discovered a security vulnerability in a Cisco model of enterprise router that could allow an attacker to take complete control of the router. After the researchers submitted the vulnerability to Cisco, they...
Microsoft’s security research department recently announced that Huawei’s MateBook laptop pre-installed management program, PCManager has two security vulnerabilities that can be escalated. This pre-installed software is mainly used to provide security detection for Huawei...
Recently, the Apache Tomcat HTTP/2 Denial of Service vulnerability (CVE-2019-0199) was discovered. This vulnerability is caused by the application service allowing a large amount of configuration traffic to be received, and the client can...
According to the developer rules of the Google Play Store, application developers must not bypass the Google detection mechanism and download code and update modules through the built-in server. However, “Doctor Web malware analysts...
Recently, security researchers have disclosed the vulnerability details of the PostgreSQL Instance code execution vulnerability (CVE-2019-9193). An attacker with database server file read permissions can exploit this vulnerability to execute arbitrary system commands. Vulnerability...
