#codeexecution

This Tuesday, Microsoft has released the first scheduled update bundle of 2021. With this January Patch Tuesday update, Microsoft has addressed a critical zero-day in Windows Defender. Also, they have

Drupal, the fourth popular most popular CMS behind the websites today, has released emergency fixes for some critical flaws. Exploiting these vulnerabilities allows code execution attacks. Drupal confirmed

Thousands of SonicWall VPN devices have a serious vulnerability triggering DoS attacks. While the patch is out, users must ensure updating their devices at their earliest convenience. SonicWall VPN DoS

Facebook for Android app had a serious vulnerability that could allow arbitrary code execution. Exploiting the bug could lead to app crash, and potentially device takeovers. Facebook for Android Vulnerability

Mozilla Firefox browser’s latest version is out. With Firefox 81, Mozilla has released numerous bug fixes including patches for code-execution vulnerabilities. Firefox 81 High-Severity Bug Fixes Reportedly,

TikTok has once again made it to the news owing to security flaws. This time, the vulnerabilities affect the TikTok Android app. Exploiting the bugs could allow stealing files from the target device. TikTok

Researchers found two security vulnerabilities affecting the Magento database plugin MAGMI. These flaws could allow remote code execution attacks. MAGMI Magento Plugin Vulnerabilities The cybersecurity

Heads up Pulse Secure VPN users! Researchers have found numerous vulnerabilities in Pulse Secure VPN that can have devastating impact on users. One of these bugs could even allow remote code execution

A serious vulnerability affected the Facebook Messenger app threatening many users. Exploiting the bug on the specific app version could facilitate long-term persistent malware attacks. Facebook Messenger

Researchers found a critical vulnerability in CODESYS web server that could allow an attacker to conduct remote attacks. Fortunately, the vendors have patched the flaw since being alerted. What is CODESYS?

VMware has recently patched numerous bugs across multiple products. The most notable of all is a critical guest-to-host vulnerability affecting the VMware Workstation Pro. WMware Patched Critical Vulnerability

Heads up, Zoho customers! A zero-day vulnerability exists in Zoho platform that can pose a serious security threat. The disgruntled researcher dropped the bug publicly on Twitter, a patch isn’t available

VMware has disclosed multiple security bugs in its software product vRealize Operations for Horizon Adapter. VMware have released fixes for the vulnerabilities urging users to update their devices. Bugs

Scan your site for the Citrix ADC Remote Code Execution CVE-2019-19781 Vulnerability #secpoint #secpointpenetrator #citrixadc #codeexecution

Like every other thing connected to the internet, power plants are also vulnerable to cyber attacks. Recently, researchers caught numerous vulnerabilities in Siemens equipment installed at power generation

Recently, NVIDIA has fixed numerous security vulnerabilities in its GeForce Experience software and GPU Display Driver. Users should ensure updating their devices to the patched versions to stay protected.

The Anti-Threat Toolkit (ATTK) by Trend Micro is a dedicated tool for fending off malware infections. However, like any other antimalware, this tool is also prone to security flaws. Recently, a researcher

A critical vulnerability exposed millions of Exim servers to a serious threat of remote attacks. The vulnerability could allow an attacker to execute malicious code on target machine with root privileges.

Reportedly, a VM escape vulnerability exists in QEMU – an open source hardware virtualization emulator. The flaw, upon exploit, could allow an attacker to attack the host QEMU process resulting in a system

Have you ever thought that an apparently harmless yet useful tool like WinRAR could pose security threats? Certainly seems so as highlighted in a recent report, the vendors have patched a WinRAR vulnerability