#arbitrarycodeexecution

This Tuesday, Microsoft has released the first scheduled update bundle of 2021. With this January Patch Tuesday update, Microsoft has addressed a critical zero-day in Windows Defender. Also, they have

Highly critical vulnerabilities existed in Dell Wyse Thin client devices. As discovered, exploiting these bugs could let an adversary take over target devices. Dell Wyse Thin Client Vulnerabilities Researchers

Starbucks has recently addressed a critical vulnerability affecting its mobile platform. The bug, upon exploitation, could severely threaten the platform security as it allowed code execution attacks.

Microsoft has released the last monthly scheduled updates of 2020 this week. The December Patch Tuesday is the second smallest update bundle of the year as Microsoft fixed 58 security flaws only. Whereas,

Drupal, the fourth popular most popular CMS behind the websites today, has released emergency fixes for some critical flaws. Exploiting these vulnerabilities allows code execution attacks. Drupal confirmed

With monthly scheduled updates for October, Microsoft rolled out fixes for 87 different vulnerabilities, including some publicly known exploits. Days after that, Microsoft fixed two more serious security

Thousands of SonicWall VPN devices have a serious vulnerability triggering DoS attacks. While the patch is out, users must ensure updating their devices at their earliest convenience. SonicWall VPN DoS

Microsoft’s scheduled monthly updates for October 2020 are out. With Patch Tuesday October, Microsoft released fixes for 87 bugs in all, including multiple critical vulnerabilities, and some publicly known

Facebook for Android app had a serious vulnerability that could allow arbitrary code execution. Exploiting the bug could lead to app crash, and potentially device takeovers. Facebook for Android Vulnerability

Mozilla Firefox browser’s latest version is out. With Firefox 81, Mozilla has released numerous bug fixes including patches for code-execution vulnerabilities. Firefox 81 High-Severity Bug Fixes Reportedly,

TikTok has once again made it to the news owing to security flaws. This time, the vulnerabilities affect the TikTok Android app. Exploiting the bugs could allow stealing files from the target device. TikTok

Microsoft has rolled out its September Patch Tuesday updates this week. Once again, it’s a huge update bundle addressing over a hundred security vulnerabilities. These include no low-severity vulnerability.

Researchers found two security vulnerabilities affecting the Magento database plugin MAGMI. These flaws could allow remote code execution attacks. MAGMI Magento Plugin Vulnerabilities The cybersecurity

Heads up, WordPress admins! Another vulnerable WordPress plugin might have exposed your website to cyber threats. Reportedly, the File Manager plugin had a critical vulnerability that could allow remote

Heads up Pulse Secure VPN users! Researchers have found numerous vulnerabilities in Pulse Secure VPN that can have devastating impact on users. One of these bugs could even allow remote code execution

Critical vulnerabilities existed in the Quiz and Master Survey plugin that threatened thousands of websites. Exploiting the flaw could allow an attacker to takeover the target website. Quiz And Master

Microsoft scheduled updates for this month are out. With Patch Tuesday August, Microsoft fixed over a hundred security vulnerabilities including two zero-day flaws. Microsoft Fixed Two Zero-Day Bugs The

Once again, a critical security flaw in a WordPress plugin posed a threat to thousands of websites. This time, the researchers discovered the vulnerability in the wpDiscuz WordPress plugin. wpDiscuz WordPress

Cisco recently issued patches for numerous security bugs in the Data Center Network Manager. These include multiple medium and high-severity vulnerabilities and a critical-severity flaw. Critical Vulnerability

The US Department of Homeland Security has issued another alert for the users regarding a Windows bug. Given the critical nature of the vulnerability dubbed as SigRed affecting Windows DNS Servers, CISA