Microsoft released the September Patch Tuesday, fixing 64 security issues ranging from simple spoofing attacks to remote code execution, involving more than 20 products. Vulnerability Overview The products involved are as follows: .NET Core,...
Zerodium, which buys and sells popular software vulnerabilities, has posted a 0day vulnerability in Tor Browser via Twitter. Advisory: Tor Browser 7.x has a serious vuln/bugdoor leading to full bypass of Tor / NoScript 'Safest' security level (supposed...
The Romanian router brand MikroTik was found to have a vulnerability this spring, but the device manufacturer immediately released a new version of the firmware to plug the vulnerability. However, there are still countless...
Recently, IBM released a security bulletin stating a potential remote code execution vulnerability in WebSphere Application Server (CVE-2018-1567). An attacker can construct a malicious serialized object and then execute arbitrary JAVA code through a SOAP...
Researchers at cybersecurity and penetration testing consultancy SureCloud found a vulnerability in Google Chrome and the Opera browser that could attack Wi-Fi. Researchers say browsers based on the Chrome kernel can save router management...
On September 5, Cisco officially released 30 security reports on different levels of vulnerability in its products, including three serious vulnerabilities. Vulnerability description CVE-2018-11776 Apache Struts2 Remote Code Execution Vulnerability (CVE-2018-11776) Affects Cisco Products...
According to reports, the Wireshark team has patched a number of serious vulnerabilities that could be exploited to force system crashes and DoS. In the analysis report provided by Cisco, it stated that the three...
Earlier, Trustwave discovered that Latvia’s router brand MikroTik was used by hacker groups to form botnets due to security breaches. The total number of infected MikroTik routers has exceeded 200,000 units, but in fact, half a year...
Earlier this month, someone was “smashing their face” on the Internet, indicating that McAfee’s BitFi cryptocurrency wallet is not “unhackable.” This conclusion by OverSoft security researchers has been around for four weeks. Now, another hacker has...
If there are no surprises, each motherboard manufacturer will release a new version of firmware next month, because the security-safe Trusted Platform Module (TPM ) is found to be a further weakness. The Trusted...
Recently, the WordPress plugin Plainview Activity Monitor was exposed to a remote command execution vulnerability. Activity Monitor tracks all user activity on your blog or network. The activities can be viewed in global table...
Recently, security experts have said through tweets that they can successfully use the zero-day vulnerability to obtain system-level permissions on a Windows 10 PC with the latest patch installed so that any application can...
Recently, Canonical released a series of important Linux kernel updates for all supported Ubuntu releases to address more than 50 security vulnerabilities affecting various kernel components. The new kernel security update is now available...
Adobe uses Microsoft’s fixed monthly date to publish routine updates, but sometimes it can only be released if there is a severe problem. Adobe has released emergency security updates for Photoshop CC 2017 18.1.5 and...
Firefox has already introduced an add-on system based on the new interface, but this will make many attachment components that use the old interface not working correctly. At the time, the new interface was...
Recently, the security searcher found the high-risk vulnerabilities in Apache Stust2. On August 23, 2018, Apache Strust2 released the latest security bulletin, and Apache Struts2 had a high-risk vulnerability in remote code execution. The...
