A security researcher named Jose Rodriguez demonstrated how to exploit the vulnerabilities of VoiceOver and Siri in a YouTube video. You can even access unrestricted access to the list of contacts stored on your...
Researchers recently discovered two new vulnerabilities (CVE-2019-13473 and CVE-2019-13474) in the Telestar Digital GmbH Internet of Things (IoT). Hackers can use these vulnerabilities to remotely control the network signals of IoT devices, change device...
On September 11, 2019, Microsoft released a security update for September. The security update covers Windows, IE, Edge, ChakraCore, Office Services, Skype, Visual Studio, .NET Framework, Exchange Server, Microsoft Yammer, Team Foundation Server. A...
Microsoft released the September security update patch on Tuesday, fixing 81 security issues ranging from simple spoofing attacks to remote code execution. Products include .NET Core, .NET Framework, Active Directory, Adobe Flash Player, ASP.NET,...
On September 10, Adobe officially released the September security update, which fixes multiple vulnerabilities in Adobe’s various products, including Adobe Application Manager and Adobe Flash Player. Vulnerability Overview: Adobe Application Manager Adobe has released...
The Google Chrome development team has now launched a new version of the stable channel, Chrome 77.0.3865.75 which contains a number of fixes and improvements. Other aspects are mainly to fix known security vulnerabilities....
More and more parents now choose to buy smartwatches for children. Most of these smartwatches can be used to make calls and track the location of children in real-time. However, the whereabouts of children...
Security researcher Christian August Holm Hansen disclosed a remote command execution vulnerability in Nexus Repository Manager 2.X. The vulnerability has a deployment permission account by default. After successful login, you can use “createrepo” or...
The well-known penetration testing framework Metasploit recently added a utilization module for the high-risk vulnerability BlueKeep in its exploitation modules. BlueKeep is numbered CVE-2019-0708, a high-risk vulnerability discovered in May this year. It is...
Recently, Linux’s mail transfer agent Exim was exposed to a remote code execution vulnerability (CVE-2019-15846) caused by accepting TLS connections, potentially allowing attackers to gain root-level access to the system “by sending an SNI...
Researchers at Trend Micro’s Zero Day Initiative revealed a 0-day privilege vulnerability in the Android operating system that allowed attackers with low access rights on affected devices to further increase their privileges. The vulnerability...
Researchers of the security company SafeBreach recently discovered a security vulnerability (CVE-2019-8461) in the anti-virus software company Check Point. The affected product is the Endpoint Security Initial Client software used on Windows devices, which...
At the end of last month, Google Chrome pushed the emergency security update to fix the browser vulnerability. At the time, the Google Chrome blog did not disclose the specific details of the vulnerability....
Atlassian Confluence officially issued a security notice to fix a local file disclosure vulnerability (CVE-2019-3394) that exists in Confluence. The vulnerability level is serious. Atlassian Confluence Server and Atlassian Data Center are products of...
Google Project Zero found that the iPhone had 14 security vulnerabilities that had existed for two years. Google said that users only need to visit a malicious website which allows hackers to get information,...
Several Ghostscript-dSAFER sandbox bypass vulnerabilities (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817) were reported. Ghostscript is a suite of software providing an interpreter for Adobe Systems’ PostScript (PS) and Portable Document Format (PDF) page description languages. Its...
