Björn Ruytenberg, a security researcher at the Eindhoven University of Technology, revealed that all PCs manufactured before 2019 may be hacked due to defects in commonly used Thunderbolt ports. Even if the PC is...
SaltStack security team issued a risk notice that there are multiple vulnerabilities in SaltStack, the vulnerability number is CVE-2020-11651/CVE-2020-11652, and the vulnerability level is serious. SaltStack makes software for complex systems management at scale....
Recently, Juniper officially released a security bulletin to fix vulnerabilities in J-Web and Web-based (HTTP/HTTPS) services in Juniper Networks Junos OS (CVE-2020-1631). “A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN...
GitLab rewarded security researcher who reported serious remote code execution vulnerabilities on their platforms with $20,000. The vulnerability was discovered by William Bowling “vakzz”. Bowling is both a programmer and a bug bounty hunter....
Google Chrome has pushed version 81.0.4044.129 to the stable channel today. At present, most users have upgraded, so Google announced the details of some vulnerabilities. Two vulnerabilities are the Use-After-Free (UAF) vulnerability (CVE-2020-6462) reported...
Affected by the coronavirus epidemic, the demand for enterprise collaboration and remote audio and video conferencing software such as Microsoft Teams has skyrocketed, and it is in this environment that the total number of...
Google recently released a report that Microsoft introduced a vulnerability in Windows 10 1903 that could invalidate the sandbox mode of all browsers based on the Chromium kernel. The specific changes made by Microsoft...
Recently, openssl officially released a risk notice for TLS 1.3 component denial of service vulnerability, the vulnerability number is CVE-2020-1967, and the vulnerability level is high-risk. OpenSSL is a software library for applications that...
According to the common practice in the industry, security companies and researchers are obliged to submit vulnerabilities to developers after they are discovered and give developers some time to fix the vulnerabilities. Security companies...
Google Chrome has pushed version 81.0.4044.113 to the stable channel last week. At present, most users have upgraded, so Google announced the details of some vulnerabilities. One of these vulnerabilities is the Use-After-Free (UAF)...
Recently, Kong issued a risk notification for the Kong Admin Restful API Gateway unauthorized vulnerability. The vulnerability number is CVE-2020-11710, and the vulnerability level is high. Kong is a cloud-native, fast, scalable, and distributed...
Oracle officially released the Critical Patch Update (CPU ) in April 2020, which fixed 397 vulnerabilities of varying degrees. These include three serious vulnerabilities against Weblogic (CVE-2020-2801, CVE-2020-2883, CVE-2020-2884) and an Oracle Coherence remote...
Microsoft released the April security update patch on Tuesday, fixing 113 security issues from simple spoofing attacks to remote code execution. Products include Android App, Apps, Microsoft Dynamics, Microsoft Graphics Component, Microsoft JET Database...
On April 14, 2020, Oracle officially released the critical patch update announcement Critical Patch Update (CPU) which fixed 397 vulnerabilities of varying degrees. “Oracle World San Francisco 2006”by stevegarfield is licensed under CC BY-NC-SA...
CVE-2020-4276 [1] and CVE-2020-4362 [2] are privilege escalation vulnerabilities in the IBM WebSphere Application Server discovered by Noxxx at Chaitin Tech. By exploiting this vulnerability, a remote and unauthorized attacker can privilege escalation and...
Recently, ZDI disclosed the technical details of a TP-Link command injection vulnerability used in the Pwn2Own Tokyo competition. The vulnerability number of this vulnerability is CVE-2020-10882. According to the ZDI analysis report, a command...
