Latest Vulnerability news

Millions of Websites Vulnerable Due to Security Bug in Popular PHP Script

A security flaw discovered in a common PHP script allows knowledgeable attackers to execute code on a website that uses a vulnerable version of the script, which in turn can allow an attacker to take control over the underlying server.
- Catalin Cimpanu
- December 27, 2016
- 05:35 AM
- 1
Panasonic Plays Down Security Bugs Found in Airplane In-Flight Entertainment Systems

Security firm IOActive published research yesterday detailing security flaws in the in-flight entertainment systems developed by Panasonic Avionics, used by multiple airlines such as United, Emirates, Virgin, KLM, Etihad, Scandinavian, Air France, and many other more.
- Catalin Cimpanu
- December 21, 2016
- 03:21 AM
- 0
It's Been a Bad Week for Linux as Several Security Flaws Surface

Two security researchers published details this week about several security flaws that allow attackers to execute code on affected machines and take over devices. These security flaws affect Linux distros such as Fedora and Ubuntu, and two of these exploits are zero-days, meaning
- Catalin Cimpanu
- December 17, 2016
- 03:35 PM
- 1
Vulnerability in Joomla Allows Attackers to Reset Passwords and Take Over Sites

The Joomla Project released version 3.6.5 of the Joomla CMS that addresses three security bugs, of which one can allow attackers to take over vulnerable sites. If this wasn't bad enough, this vulnerability, tracked as CVE-2016-9838, affects all Joomla versions released in the past five years.
- Catalin Cimpanu
- December 14, 2016
- 06:40 AM
- 0
A Quarter of the Most Vulnerable Software Applications Are Security Products

A report released today on the software products with the most security flaws in the past three months reveals that almost a quarter of all entries on the monthly Top 20 list were various types of security products.
- Catalin Cimpanu
- November 29, 2016
- 06:45 PM
- 2
PayPal Removes "Magic Word" from OAuth Authentication Procedure

PayPal engineers have removed a "magic word" that would have allowed an attacker to obtain OAuth secret tokens for -- any -- PayPal application and access customer details.
- Catalin Cimpanu
- November 29, 2016
- 09:05 AM
- 0
Linux Flaw allows Root Shell During Boot-Up for LUKS Disk-Encrypted Systems

An error in the implementation of the Cryptsetup utility used for encrypting hard drives allows an attacker to bypass the authentication procedures on some Linux systems just by pressing the Enter key for around 70 seconds. This results in the attacked system opening a shell with root privileges.
- Catalin Cimpanu
- November 15, 2016
- 04:16 AM
- 1
Venmo Patches Flaws that Allowed Attackers to Steal $2,999.99 Using Siri

Martin Vigo, a security engineer for Salesforce.com, found a way to steal money from unsuspecting Venmo users using Siri. This flaw would have allowed an attacker to steal up to $2,999.99 dollars from a victim per weak.
- David Bisson
- August 02, 2016
- 11:25 AM
- 0
Apple releases Security Updates for core OS Products

Today apple released updates for iTunes, iOS, Safari, OS X El Capitan, tvOS, and watchOS. It is advised that all users of these products install the updates immediately as there were numerous critical vulnerabilities fixed.
- Lawrence Abrams
- May 16, 2016
- 08:51 PM
- 0
May's Patch Tuesday delivers 16 Security Updates for Microsoft Products

May's Microsoft Patch Tuesday is here and there are 16 security updates for Microsoft products. Included in these updates are patches for 8 vulnerabilities labeled as critical because they allow an attacker to perform remote code execution on the vulnerable product.
- Lawrence Abrams
- May 10, 2016
- 10:43 PM
- 1
Adobe releases Updates for Reader, Acrobat, Coldfusion, Releases advisory on Flash

Adobe has released security updates for Adobe Reader, Acrobat, and Coldfusion. With a whopping 92 vulnerabilities in Reader and Acrobat, with many of them being critical, it is essential that everyone install the latest available update. Furthermore, Adobe released an advisor about a vulnerability currently being used in Adobe Flash
- Lawrence Abrams
- May 10, 2016
- 12:47 PM
- 0
Why Everyone should uninstall QuickTime Now!

Yesterday US-Cert released a security alert about two new critical vulnerabilities in in QuickTime for Windows. As Apple has announced that they are no longer supporting QuickTime and will not be fixing these vulnerabilities, it is suggested that you uninstall this program from your computer.
- Lawrence Abrams
- April 15, 2016
- 05:12 PM
- 3
Adobe releases the Flash Player 21.0.0.213 emergency update to resolve Critical Vulnerabilities

Adobe has released an emergency update to resolve critical vulnerabilities in their Adobe Flash Player product. The new version is 21.0.0.213 and resolves critical vulnerabilities that could allow an attacker to remotely take control of your computer.
- Lawrence Abrams
- April 08, 2016
- 11:00 AM
- 2
Adobe releases Security Advisory on Critical Vulnerability CVE-2016-1019

Adobe released an updated security advisory yesterday regarding a critical vulnerability (CVE-2016-1019) that exists in Adobe Flash Player 21.0.0.197 and earlier versions. Though an emergency update may be released tomorrow, all Flash users are advised to immediately upgrade to the latest version.
- Lawrence Abrams
- April 06, 2016
- 08:30 PM
- 1
QuickTime Update addresses Multiple Remote Code Execution Vulnerability

A security update has been released for QuickTime that resolves numerous remote code execution and application termination vulnerabilities. QuickTime 7.7.9 has been released to fix these updates and all users are advised to install it immediately.
- Lawrence Abrams
- January 08, 2016
- 12:10 PM
- 0
VMware issues Security Advisory for Shared Folders Feature

A security advisory has been released by VMware for a Windows-based guest privilege escalation vulnerability that affects VMware ESXi, Fusion, Player, and Workstation. It is suggested that all users of these products upgrade to the latest patch immediately.
- Lawrence Abrams
- January 07, 2016
- 10:03 PM
- 0
Zero Day GRUB2 Vulnerability Exposed

A new zero-day vulnerability was discovered for the Grub bootloader that allows attackers to bypass Grub password authentication. A security notice released by researchers Hector Marco & Ismael Ripoll states that Grub versions 1.98 (December, 2009) through 2.02 (December, 2015) are affected by this bug.
- Pranav Jituri
- December 18, 2015
- 03:20 PM
- 0