Home Vulnerabilities

Vulnerabilities

Critical flaw in Cisco WebEx extension fixed

If you use WebEx extension for Firefox or Chrome running on Windows, you may be vulnerable to a remote code execution attack: visiting a...

Home security system vulnerable to a handful of attacks

iSmartAlarm manufactures miscellaneous security appliances such as door and motion sensors, locks, cameras, alarms, and central controllers (dubbed the Cube). All of them are...

Two major vulnerabilities found in Windows NTLM protocol

This month, Microsoft released security patches, covering a number of critical flaws. Those include a privilege escalation vulnerability threatening all versions of Windows OS. Specialists...

Satellite phone encrypted communications can be cracked in real time

Conducted by Chinese security specialists, a new security research has shown there is another way to decrypt satellite phone calls, initially encrypted using the...

A recently detected bug triggers unusual behaviour in systemd

A bug found in systemd has caught a lot of attention within the past few days. As it has become known, an invalid username...

A number of critical flaws poke holes in Cisco’s security

As Cisco’s weekly security update list shows, there are some major vulnerabilities. Greatly affecting both the Elastic Services Controller and the Ultra Services Framework,...

Researchers cracked GnuPG, patch available

Security researchers succeeded at cracking libgcrypt20, GnuPG’s cryptographic core: they got their hands on the entire 1024-bit RSA key after taking an advantage of...

WordPress Statistics hit by SQL Injection vulnerability

During their vulnerability research project, experts at Sucuri Inc. have detected a SQL injection flaw in WP Statistics. The WordPress Statistics plugin enables administrators...

Arbitrary code execution flaw found in systemd

A vulnerability in systemd-resolved version 223 or newer lets a malicious DNS server perform an out-of-bounds write in the memory allocated to the daemon....

Islamic “hacktivists” target US government websites by using an old exploit

On June 25, 2017, a number of government websites, including official sites belonging to Ohio Governor John Kasich and Ohio First Lady Karen Kasich,...

TRENDING STORIES

FOLLOW US

77FansLike
16FollowersFollow