More and more parents now choose to buy smartwatches for children. Most of these smartwatches can be used to make calls and track the location of children in real-time. However, the whereabouts of children...
Security researcher Christian August Holm Hansen disclosed a remote command execution vulnerability in Nexus Repository Manager 2.X. The vulnerability has a deployment permission account by default. After successful login, you can use “createrepo” or...
The well-known penetration testing framework Metasploit recently added a utilization module for the high-risk vulnerability BlueKeep in its exploitation modules. BlueKeep is numbered CVE-2019-0708, a high-risk vulnerability discovered in May this year. It is...
Recently, Linux’s mail transfer agent Exim was exposed to a remote code execution vulnerability (CVE-2019-15846) caused by accepting TLS connections, potentially allowing attackers to gain root-level access to the system “by sending an SNI...
Researchers at Trend Micro’s Zero Day Initiative revealed a 0-day privilege vulnerability in the Android operating system that allowed attackers with low access rights on affected devices to further increase their privileges. The vulnerability...
Researchers of the security company SafeBreach recently discovered a security vulnerability (CVE-2019-8461) in the anti-virus software company Check Point. The affected product is the Endpoint Security Initial Client software used on Windows devices, which...
At the end of last month, Google Chrome pushed the emergency security update to fix the browser vulnerability. At the time, the Google Chrome blog did not disclose the specific details of the vulnerability....
Atlassian Confluence officially issued a security notice to fix a local file disclosure vulnerability (CVE-2019-3394) that exists in Confluence. The vulnerability level is serious. Atlassian Confluence Server and Atlassian Data Center are products of...
Several Ghostscript-dSAFER sandbox bypass vulnerabilities (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817) were reported. Ghostscript is a suite of software providing an interpreter for Adobe Systems’ PostScript (PS) and Portable Document Format (PDF) page description languages. Its...
Cisco officially released an announcement to fix an authentication bypass vulnerability (CVE-2019-12643) in the REST API virtual service container of Cisco IOS XE software. The cause of the vulnerability is that the code that...
Recently, a researcher announced a heap buffer overflow vulnerability (CVE-2019-14378) that exists in the QEMU simulator SLiRP network implementation. An attacker could exploit the vulnerability to compromise the QEMU process on the host, resulting...
Researcher detected multiple vulnerabilities in the Pulse Secure SSL VPN. These vulnerabilities can exploit the vulnerability to read arbitrary files including plaintext passwords, account information, and session information, as well as execute system commands....
On August 22, 2019, the Trend Micro research team released the Squid Proxy Server Buffer Overflow Vulnerability Analysis Report numbered CVE-2019-12527. Attackers can construct packets without authentication to exploit this vulnerability to create remote...
F-Secure’s hardware security team found two vulnerabilities in Xilinx Zynq UltraScale+ SoCs, one of which could not be patched by updating security patches. The affected products include ZynqUltraScale + series system-on-chip (SoC), multi-processor system-on-chip...
French security researcher Pierrick Gaudry found that the Moscow blockchain voting system, which is scheduled to be used next month, has serious vulnerabilities and can calculate the private key based on the public key....
Recently, the Cisco Talos team released several technical analysis that Aspose.cells and Aspose.words in Aspose products have remote code execution vulnerabilities. Attackers can make a malicious file to exploit related vulnerabilities and remotely execute...
