Recently, Linux officially fixed a local privilege vulnerability in the Linux kernel, CVE-2019-13272. Through this vulnerability, an attacker can promote a normal privileged user to root privilege. Vulnerability Description In the Linux kernel before...
A US network security company called Immunity Inc. announced on July 23 that it will launch the BlueKeep exploit module, which will be included in a pen-testing tool called CANVASv7.23, the company’s pen-testing toolkit....
Earlier, we mentioned that security agencies issued warnings that high-risk vulnerabilities in the well-known open-source media player VLC affect hundreds of millions of users around the world. The organization that issued this warning was...
Recently, a security agent analyzed a vulnerability in Jackson-databind (CVE-2019-12384) and found that when certain conditions are met, an attacker can bypass the blacklist restriction by sending a malicious request packet, so can get...
Recently, ProFTPd officially fixed an arbitrary file copy vulnerability (CVE-2019-12815). The vulnerability stems from the custom SITE CPFR and SITE CPTO operations in the mod_copy module. By issuing these two commands to ProFTPd, an attacker...
On July 18, 2019, Palo Alto officially released a notice of remote code execution vulnerability in the GlobalProtect Portal/Gateway interface (CVE-2019-1579), vendor number: PAN-SA-2019-0020. This vulnerability is a remote code execution vulnerability. Based on...
The German network security agency CERT-Bund is responsible for organizing the country’s computer security-related emergency response, and they recently discovered a critical flaw in the popular VLC media player. As we all know, VLC...
Researchers at Eclypsium disclosed vulnerabilities discovered on the BMC firmware used by Lenovo and Gigabyte servers. This vulnerability can be used to embed a malicious program into the firmware, making it difficult to detect...
On July 16, 2019, Oracle officially released the July 2019 Critical Patch Update (CPU), security notices and third-party security bulletins and other announcements, and fixed 319 different levels of vulnerability. “Oracle World San Francisco...
Security company Tenable found a new vulnerability (CVE-2019-10915) in the Siemens software platform TIA Portal, which is used to maintain industrial control systems for large critical infrastructure such as nuclear power plants. The researchers...
Recently, JIRA released a security bulletin to fix a server-side template injection vulnerability (CVE-2019-11581), affecting Jira Server and Jira Data Center. An attacker who successfully exploited the vulnerability could remotely execute code on the affected...
The Zoom for Mac version of well-known remote video conferencing software has been found by security researchers to have serious security vulnerabilities. An attacker could exploit this vulnerability to remotely turn on the target...
On July 9th, local time, Adobe officially released the July security update, which fixes multiple vulnerabilities in Adobe’s various products, including Adobe Bridge CC, Adobe Experience Manager, and Adobe Dreamweaver. Vulnerability Overview: Adobe Bridge...
Microsoft released the July security update patch on Tuesday, fixing 79 security issues from simple spoofing attacks to remote code execution. The products involved in .NET Framework, ASP.NET, Azure, Azure DevOps, Internet Explorer, Microsoft...
Recent researchers have recently discovered a vulnerability in a common open-source software for genomic analysis, which will lead to DNA-based medical diagnosis is vulnerable to cyber-attacks. Researchers at Sandia National Laboratories discovered the weakness...
Downloading .HTML files through a browser are usually phishing or scam, but researchers have found that sometimes it can be used to steal user files. The researchers found a 17-year-old security vulnerability in Firefox,...
