#codeexecutionflaw

This Tuesday, Microsoft has released the first scheduled update bundle of 2021. With this January Patch Tuesday update, Microsoft has addressed a critical zero-day in Windows Defender. Also, they have

Drupal, the fourth popular most popular CMS behind the websites today, has released emergency fixes for some critical flaws. Exploiting these vulnerabilities allows code execution attacks. Drupal confirmed

Thousands of SonicWall VPN devices have a serious vulnerability triggering DoS attacks. While the patch is out, users must ensure updating their devices at their earliest convenience. SonicWall VPN DoS

Facebook for Android app had a serious vulnerability that could allow arbitrary code execution. Exploiting the bug could lead to app crash, and potentially device takeovers. Facebook for Android Vulnerability

Mozilla Firefox browser’s latest version is out. With Firefox 81, Mozilla has released numerous bug fixes including patches for code-execution vulnerabilities. Firefox 81 High-Severity Bug Fixes Reportedly,

Researchers found two security vulnerabilities affecting the Magento database plugin MAGMI. These flaws could allow remote code execution attacks. MAGMI Magento Plugin Vulnerabilities The cybersecurity

Heads up Pulse Secure VPN users! Researchers have found numerous vulnerabilities in Pulse Secure VPN that can have devastating impact on users. One of these bugs could even allow remote code execution

A serious vulnerability affected the Facebook Messenger app threatening many users. Exploiting the bug on the specific app version could facilitate long-term persistent malware attacks. Facebook Messenger

Researchers found a critical vulnerability in CODESYS web server that could allow an attacker to conduct remote attacks. Fortunately, the vendors have patched the flaw since being alerted. What is CODESYS?

Heads up, Zoho customers! A zero-day vulnerability exists in Zoho platform that can pose a serious security threat. The disgruntled researcher dropped the bug publicly on Twitter, a patch isn’t available

Like every other thing connected to the internet, power plants are also vulnerable to cyber attacks. Recently, researchers caught numerous vulnerabilities in Siemens equipment installed at power generation

Recently, NVIDIA has fixed numerous security vulnerabilities in its GeForce Experience software and GPU Display Driver. Users should ensure updating their devices to the patched versions to stay protected.

A critical vulnerability exposed millions of Exim servers to a serious threat of remote attacks. The vulnerability could allow an attacker to execute malicious code on target machine with root privileges.

Reportedly, a VM escape vulnerability exists in QEMU – an open source hardware virtualization emulator. The flaw, upon exploit, could allow an attacker to attack the host QEMU process resulting in a system

A researcher from Cisco Talos has discovered security vulnerabilities in two popular VPN clients, NordVPN and ProtonVPN. Both the VPNs use the OpenVPN source software to develop secure tunnels between