Recently, Lilith Wyatt and Claudio Bozzato from the Cisco Talos research team found eight vulnerabilities in Google Nest Cam IQ indoor networking camera (version 4620002), including three denial-of-service (DoS) vulnerabilities, two code execution Vulnerabilities...
Due to a newly discovered vulnerability in the Bluetooth standard, hackers may weaken the encryption of Bluetooth devices and then snoop on the communication or take over the device. This bug does not directly...
Yesterday, Microsoft has pushed this month’s routine cumulative update to various products to fix various vulnerabilities, but there is a known security vulnerability that Microsoft has not fixed. In view of this Google security...
On August 13, a researcher from the vxrl vulnerability-lab published a remote code execution vulnerability (CVE-2019-14422) found in TortoiseSVN. The vulnerability is caused by TortoiseSVN’s URI handler (Tsvncmd:) which allows custom diff operations on...
The Netflix security team teamed up with Google, CERT/CC to disclose the problem of the Distributed-Denial of Service attack vulnerability in the implementation of the HTTP/2 protocol in various middleware services. Many of the...
Recently, Adobe officially released the August security update, which fixes multiple vulnerabilities in Adobe’s various products, including Adobe Photoshop CC, Adobe Experience Manager, Adobe Acrobat and Reader, Adobe Creative Cloud Desktop Application, and Adobe...
Today Microsoft released a series of patches for Remote Desktop Services, including two key RCE vulnerabilities: CVE-2019-1181 and CVE-2019-1182 . Similar to the previously fixed “BlueKeep” vulnerability ( CVE-2019-0708 ), these two vulnerabilities can also achieve “wormable” effects, which means that malware can exploit these vulnerabilities and...
Microsoft released the August security update patch on Tuesday, fixing 95 security issues ranging from simple spoofing attacks to remote code execution. Products include Active Directory, HTTP/2, Microsoft Bluetooth Driver, Microsoft Browsers, Microsoft Dynamics,...
An independent researcher, Vasily Kravets found a loophole in the steam game platform. Kravets said that all Windows versions of the Steam client exist this vulnerability, which allows hackers to escalate privilege on the...
McAfee researchers recently revealed that there is a remote code execution vulnerability called CVE-2009-0692 in the VOIP solution provider developed by Avaya. An attacker could exploit the vulnerability to hijack the phone’s normal operations,...
Artifex officially submitted a fix for the merged Bug 701394 on the master branch of Ghostscript. Designed to fix CVE-2019-10216 vulnerability. The vulnerability can bypass the Ghostscript security sandbox directly, allowing an attacker to...
At present, information security issues are becoming more and more prominent. After the Spectre and Meltdown are found, computer hardware vulnerabilities have gradually become the focus of information security researchers. Recently, a network security...
At a recent Def Con 2019 security conference, researchers revealed that the Contacts app that comes with Apple’s iOS system is vulnerable to database vulnerabilities. It is not the problem that Apple has caused...
Ruben Santamarta, an industrial network security expert from IOActive, found multiple security vulnerabilities in the firmware of the core network components of the Boeing 787. He said that hackers can use these vulnerabilities to...
Due to its cross-platform capabilities, the Electron development platform is a key component of many applications. Electron-based on JavaScript and Node.js is used in popular messaging applications such as Skype, WhatsApp and Slack, and...
At the BlackHat USA security conference in Las Vegas, Natalie Silvanovich, a security expert from the Google Project Zero team, showed a new attack called “interaction-less” bug in the iOS iMessage client, which can...
