Luka Šikić, a security researcher from WebARX has just discovered a flaw in the “Simple Social Buttons” plugin. The plugin is designed to make it easy for webmasters to embed social sharing buttons to...
Runc is a CLI tool that creates and runs containers based on the OCI (Open Container Initiative) standard. Currently, the docker engine is also internally built based on runc. On February 11, 2019, researchers revealed details...
Recently, Google has open sourced a fuzzing test infrastructure, ClusterFuzz, which makes it very easy to automate the search and fix bugs in the program. Fuzzy testing is a method for automating the detection of...
Microsoft has issued mitigation updates for Spectre variants in various versions of Windows 10, which were first introduced in August last year. These updates include KB4465065 – Windows 10 version 1809, KB4346084 – Windows 10 version 1803, KB4346085 – Windows...
Canonical fixes security issues with the Ubuntu 18.4 LTS Linux kernel, which affects Ubuntu and all its derivatives, such as Kubuntu, Lubuntu, Ubuntu GNOME, Ubuntu Budgie, Ubuntu Kylin, and Ubuntu Studio, as well as...
If your work unit is using a Cisco Small Business RV320/RV325 Router, then be sure to remind your network administrators to install the latest firmware update released by Cisco last week. According to the...
Total Donations is an easy-to-use but powerful WordPress plugin for accepting online donations. Donors can quickly contribute to your non-profit, church or political organization using an intuitive donation form while the administrative panels allow...
phpMyAdmin is a free software tool written in PHP that is intended to handle the administration of a MySQL or MariaDB database server. You can use phpMyAdmin to perform most administration tasks, including creating...
On January 22, researcher Max Justicz announced a remote code execution vulnerability in Linux apt/apt-get. The CVE number is CVE-2019-3462. The vulnerability stems from the fact that apt does not reasonably handle certain parameters when redirecting....
Cisco Small Business Switch software exists a critical vulnerability (CVE-2018-15439), which allows an attacker to remotely control the device without authentication. The vulnerability has a CVSS severity of 9.8, which is related to default configurations...
According to a report released by Embedi researcher Denis Selianin, Marvell Avastar 88W8897 wireless chipset firmware has security vulnerabilities, causing security risks for billions of laptops, smartphones, gaming devices, routers and IoT devices using...
Security researchers, Robert have published a vulnerability in the ES File Explorer app that allows an attacker to gather many Android device data. Robert said app versions 4.1.9.5.2 and below is vulnerable. ES File Explorer (File Manager) is a full-featured...
On January 15, 2019, Oracle officially released the January 2019 Critical Patch Update (CPU), security notices and third-party security bulletins and other announcements, and fixed 284 different levels of vulnerability. See the appendix table for...
Security researchers have recently revealed a vulnerability in Systemd, a core component of the Linux system, that exploits root privileges and steals confidential information. Including memory corruptions CVE-2018-16864 and CVE-2018-16865 and an information leak...
Imperva released “The State of Web Application Vulnerabilities in 2018” report yesterday. The data shows that there were 17,142 new web application vulnerabilities discovered in 2018, an increase of 21% from 2017 and an increase...
Microsoft released the January security patch in a routine update yesterday, fixing 51 security vulnerabilities. There are no vulnerabilities that have been exploited in the wild. Only one vulnerability has been disclosed previously. This vulnerability...
