80 articles
The Italian National Cybersecurity Agency and the France CERT have issued an alert about an ongoing ransomware campaign targeting VMware ESXi servers worldwide. Organizations are urged to apply security patches and prevent exploitation of the CVE-2021-21974 vulnerability
The maintainers of OpenSSH have released version 9.2 to address a pre-authentication double free vulnerability in the OpenSSH server (sshd). Learn about the vulnerability, its potential impact, and how to protect yourself
VMware has fixed a high-severity privilege escalation flaw in Workstation that allows attackers to delete arbitrary files. The issue was reported by Cirosec and updates are available to remedy the vulnerability.
Critical vulnerability (CVE-2023-22501) in Jira Service Management Server and Data Center, its impact, and how to fix it with the latest updates from Atlassian.
A security vulnerability in Binwalk, a popular Linux command-line tool used for analyzing and extracting firmware images, could lead to remote code execution. The path traversal issue is caused by a failed attempt to mitigate risk in the Professional File System extractor plugin. The vulnerabilit…
F5 has issued a warning about a high-severity format string vulnerability in BIG-IP. An authorized attacker may cause a denial-of-service or execute arbitrary code. Versions of BIG-IP from 13.1.5 to 17.0.0 are vulnerable. Protect your system by checking if your product is affected and using iHeal…
According to the data collected from over 500 million tests, 72% of organizations remain vulnerable to the Log4Shell vulnerability
Yet another Chrome "zero-day" vulnerability was patched by Google, the 8th for 2022.
In Plesk versions starting from Plesk 17.8 attacker can execute commands and/or alter settings including the change of the admin's password.
The vulnerability could allow an attacker to bypass lock-screen protections such as fingerprint or PIN authentication and obtain physical access to a target device.
Critical vulnerabilities have been discovered in Citrix Gateway and Citrix ADC which can allow an attacker to gain unauthorized access, perform remote desktop takeover and bypass user login brute force protection.
VMware warns that an exploit has been made publicly available, and urges its customers to upgrade to the latest release.
Since the start of 2022, Apple has addressed nine vulnerabilities with the latest one affecting iOS and iPad OS.
Similar to the Spring4Shell and Log4Shell vulnerabilities, Text4Shell is a new vulnerability in the Apache Commons Text library.
Ambisonics security engineer Charles Fol has discovered 5 vulnerabilities and built 8 exploits to gain root privileges on every WatchGuard Firebox/XTM appliance.
This vulnerability could allow remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request.
GitLab has released a security update to address a critical vulnerability that may lead to remote code execution.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity flaw impacting Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities Catalog.