A few days ago, security researchers announced extensions host permission bypass vulnerabilities and details in Microsoft Edge browser. This problem has been fixed in Microsoft’s routine update in March 2019, but researchers have only...
Last year, the European Union launched a new program to sponsor some popular open source software to solve security problems, because the EU itself used these open source software. Most of the open source...
Microsoft Security Intelligence official Twitter account released a series of security warnings this week, all of which were issued for Microsoft Office RTF vulnerabilities. In the past few years, there have been more security...
PHP is without a doubt one of the most popular programming languages out there. It is largely used to make dynamic or interactive pages on the web. It is used by a very large...
The female hacker active on Twitter once again announced the Windows 10 zero-day vulnerability. This zero-day vulnerability is similar to the previous one, mainly due to local privilege escalation. Of course, the details of...
Microsoft’s Remote Desktop Protocol supports Network Level Authentication (NLA), which is designed to authenticate users and provide remote desktop security. In theory, if the user does not actively share the necessary authentication information to...
phpMyAdmin is a free software tool written in PHP that is intended to handle the administration of a MySQL or MariaDB database server. You can use phpMyAdmin to perform most administration tasks, including creating...
If you are a Windows user who has not updated the system after discovering the Bluekeep vulnerability a few weeks ago, the warning from the National Security Agency (NSA) may change your mind. It...
Recently, Linux’s mail transfer agent Exim was exposed to a remote code execution vulnerability (CVE-2019-10149) caused by incorrect validation of the recipient’s address in the deliver_message() function in /src/deliver.c. Eximis a mail transfer agent (MTA) used...
Tavis Ormandy, a security engineer at Google’s security lab, said on Twitter that a zero-day vulnerability has been found in the Notepad program. From the screenshot released by Tavis Ormandy on Twitter, the security...
There have been reports recently that there are still millions of PCs exposed on the public network that are vulnerable to BlueKeep vulnerability. This vulnerability exists in the Windows XP/7 and Server 2003/2008 and...
NVIDIA just released a security bulletin to disclose two high-risk security vulnerabilities in the NVIDIA GeForce Experience (GFE). These vulnerabilities could allow potential local attackers to launch code execution attacks and denial of service...
Microsoft released a security update in the middle of this month to fix security vulnerabilities in Remote Desktop Protocol. The industry predicts the potential damage caused by this vulnerability to be even larger than...
Security researcher Filippo Cavallarin recently discovered a security vulnerability on macOS 10.14.5 that can ignore the first barrier of the system security Gatekeeper to run unsafe applications directly, and thus obtain the system’s shell...
Yesterday, SandboxEscaper uploaded a 0-day code for the Windows 10 arbitrary file deletion on github, which is the fifth 0-day released by sandboxescaper since August 2018. Today, SandboxEscaper released two new 0-day flaws on...
On May 21, 2019, sandboxescaper uploaded a 0Day code for the Windows 10 arbitrary file deletion on github, which is the fifth 0Day released by sandboxescaper since August 2018. The vulnerability principle is similar to...
