Latest RCE news

OpenOffice Vulnerable to Remote Code Execution, LibreOffice Patched

The latest version of OpenOffice is exposed to a remote code execution vulnerability that can be triggered using automated macro execution when users move the mouse over a maliciously crafted ODT document. The issue was patched in LibreOffice 6.0.7/6.1.3.
- Sergiu Gatlan
- February 05, 2019
- 02:05 PM
- 3
RDP Clients Exposed to Reverse RDP Attacks by Major Protocol Issues

Multiple major vulnerabilities were discovered in the Remote Desktop Protocol (RDP) protocol which can allow bad actors to take control of computers connecting to a malicious server using remote code execution and memory corruption.
- Sergiu Gatlan
- February 05, 2019
- 09:03 AM
- 2
NumPy Is Awaiting Fix for Critical Remote Code Execution Bug

The current version of the popular NumPy library relies on unsafe default usage of a Python module that could lead to remote code execution in the context of the affected application.
- Ionut Ilascu
- January 24, 2019
- 08:51 AM
- 0
Remote Code Execution Bug Patched in APT Linux Package Manager

A remote code execution bug was discovered by security contractor Max Justicz in the APT high level package manager used by Debian, Ubuntu, and other related Linux distributions. The bug has been fixed today in the latest versions of APT.
- Sergiu Gatlan
- January 22, 2019
- 11:48 AM
- 1
WordPress-Related Vulnerabilities Saw a 30% Uptick in 2018

WordPress-related vulnerabilities have seen a 300% increase in 2018 compared to the previous year, a recent study has found. Most of the bugs were in the plugins that extend the functionality of WordPress websites.
- Ionut Ilascu
- January 09, 2019
- 10:58 AM
- 1
Microsoft January 2019 Patch Tuesday Includes 51 Security Updates

Today is Microsoft's January 2019 Patch Tuesday, which means it is first time in 2019 that you get to update Windows! Included in this month's security updates is a Critical update that was publicly exposed, so it is important that you install all available updates as soon as possible to protect your computer.
- Lawrence Abrams
- January 08, 2019
- 04:45 PM
- 1
Adobe Acrobat and Reader Security Updates Released for Critical Bugs

Today, Adobe released security bulletin APSB19-02 that describes two security updates for critical vulnerabilities in Adobe Acrobat and Reader. In these updates only two vulnerabilities were fixed, but they are classified as Critical because they allow privilege escalation and arbitrary code execution.
- Lawrence Abrams
- January 03, 2019
- 03:37 PM
- 0
HackerOne Offers Free Sandboxes To Replicate Real-World Security Bugs

HackerOne has announced that it makes available to hackers that want to test and hone their skills a set of five sandbox environments modeled after popular security bugs reported through its platform.
- Ionut Ilascu
- December 06, 2018
- 03:14 AM
- 0
Apple Fixes Passcode Bypass, RCE Vulnerabilities, and More in Today's Updates.

Today Apple released updates for their core products that includes iCloud, Safari, iTunes, macOS Mojave, High Sierra, Sierra, Shortcuts for iOS 2.1.2, tvOS 12.1.1, and of course iOS 12.1.1.
- Lawrence Abrams
- December 05, 2018
- 05:23 PM
- 0
November Android Security Update Fixes Critical Bugs, Drops Media Library

Google released to all users and partners its November security bulletin for the Android operating system, with fixes for critical remote code execution (RCE) and privilege escalation vulnerabilities.
- Ionut Ilascu
- November 07, 2018
- 06:51 AM
- 0
Apache Struts Team Urges Users for Library Update to Plug Years-Old Bugs

In an advisory yesterday, the Apache Software Foundation reiterates its recommendation for users of Struts to make sure their installations run a version of the Commons FileUpload library newer than 1.3.2, lest they expose their projects to possible remote code execution attacks.
- Ionut Ilascu
- November 06, 2018
- 05:25 AM
- 0
Security Bug in Icecast Puts Online Radio Stations At Risk

A vulnerability discovered in Icecast streaming media server could be leveraged by an attacker to kill the broadcast of online radio stations that rely on it to reach their audience.
- Ionut Ilascu
- November 05, 2018
- 04:13 AM
- 0
Remote Code Execution Flaws Found in FreeRTOS - Popular OS for Embedded Systems

FreeRTOS, the open-source operating system that powers most of the small microprocessors and microcontrollers in smart homes and critical infrastructure systems has 13 vulnerabilities, a third of them allowing remote code execution.
- Ionut Ilascu
- October 22, 2018
- 04:37 AM
- 2
Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available

Windows JET Database Engine continues to be vulnerable to remote code execution bug after Microsoft released a patch in the October security updates rollout.
- Ionut Ilascu
- October 13, 2018
- 03:04 AM
- 0
PoC Code Available for Microsoft Edge Remote Code Execution Bug

The flurry of security bugs Microsoft addressed with its latest rollout of updates includes a remote code execution vulnerability in Edge web browser. The glitch relies on abusing URI schemes and scripts in Windows that can run with user-defined parameters.
- Ionut Ilascu
- October 11, 2018
- 06:50 PM
- 1
Critical RCE Peekaboo Bug in NVR Surveillance System, PoC Available

A critical vulnerability in software from a global vendor of video surveillance equipment puts at risk the security of video feeds from over 100 camera brands and more than 2,500 camera models.
- Ionut Ilascu
- September 18, 2018
- 11:26 AM
- 0
Critical Flaw Fixed in Packagist, PHP's Largest Package Repository

The maintainers of Packagist, the PHP ecosystem's largest package repository, have fixed a critical vulnerability on their official website that could have allowed an attacker to hijack their service.
- Catalin Cimpanu
- August 29, 2018
- 05:07 AM
- 0
Active Attacks Detected Using Apache Struts Vulnerability CVE-2018-11776

After last week a security researcher revealed a vulnerability in Apache Struts, a piece of very popular enterprise software, active exploitation attempts have started this week.
- Catalin Cimpanu
- August 28, 2018
- 12:39 PM
- 1
Valve Patches Security Bug That Existed in Steam Client for the Past Ten Years

Valve developers have recently patched a severe security flaw that affected all versions of the Steam gaming client released in the past ten years.The vulnerability would have allowed an attacker to execute malicious code on any of Steam's 15 million gaming clients.
- Catalin Cimpanu
- May 31, 2018
- 06:58 AM
- 0