Network security researchers Brian Satira and Brian Olson have recently discovered four severe vulnerabilities in the firmware and Android software controller applications for Norwegian marine diesel engine company Auto Maskin. These vulnerabilities could give...
Recently, the TALOS team announced a high-risk remote code execution vulnerability CVE-2018-4013 in Live Networks LIVE555. The vulnerability stems from the HTTP packet parsing function of the LIVE555 RTSP server library. An attacker can cause...
Amazon recently fixed 13 security vulnerabilities in the Internet of Things operating system FreeRTOS and the AWS connectivity module. These vulnerabilities could cause an intruder to compromise a device, divulge in-memory content, and run...
Recently, Drupal officially released security notices to fix multiple security issues, including two serious remote code execution vulnerabilities, affecting multiple versions of Drupal 7 and 8. Vulnerability Overview The vulnerability is summarized as follows:...
Tumblr, a well-known blog sharing site, just released a security bulletin to reveal serious security vulnerabilities that have been fixed. A security researcher submitted the security breach through a soup-free bounty hunter program that...
On October 16, local time, libssh officially released an update bulletin to fix a server-side authentication bypass vulnerability (CVE-2018-10933) in version 0.6 and higher. By providing the server with an SSH2_MSG_USERAUTH_SUCCESS message instead of the...
On October 16th, local time, Oracle officially released the October (third quarter) critical patch update CPU (Critical Patch Update), which fixed a July (second quarter) CPU patch. The (CVE-2018-2893) Weblogic Remote Code Execution Vulnerability...
On October 16, 2018, Oracle officially released the October 10 critical patch update announcement CPU (Critical Patch Update), security notices and third-party security bulletins and other announcements, fixed 301 different vulnerability levels. See the appendix...
Cisco security lab recently discovered a new virus sample that exploits Microsoft Word’s known security vulnerabilities. Microsoft Word has previously been found to have severe multiple security vulnerabilities, but Microsoft has already released an update...
Hundreds of millions of users may have been exposed to cross-site scripting (XSS) attacks due to vulnerabilities in the services Branch.io used by Tinder, Shopify, Yelp and many others. When vpnMentor researchers analysed Tinder...
Microsoft’s routine security update released this month has fixed multiple security issues in the system, but the Microsoft JET database engine vulnerability has not been completely fixed. Long ago, Trend Micro Labs found that...
On October 9, Microsoft released a monthly security bulletin for October 2018 and released a security update deployment to fix multiple security vulnerabilities in numerous products. In the repair of the security update deployment of...
Adobe officially released the October security update, which fixes multiple vulnerabilities in its products, including Digital Editions, Experience Manager, Framemaker and Technical Communications Suite. Vulnerability Overview: Adobe Digital Editions Adobe has released a security...
Microsoft released the October security update patch on Tuesday, fixing 51 security issues ranging from simple spoofing attacks to remote code execution. Products include .NET Core, Azure, Device Guard, Internet Explorer, Microsoft Edge, Microsoft...
GitHub is the preferred code sharing and hosting service for developers worldwide. Although the EU has not finalized the deal, the company was acquired by Microsoft in June for a price of $7.5 billion. Today, GitHub...
Intel Management Engine was previously found to be a severe security vulnerability, and Intel and various operating system developers have since blocked the vulnerability. The serious reason is that the ME management engine driver...
