Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1 incorrectly handled uploading multiple files using one form field (CVE-…
Several out of bounds memory access and buffer overflows were fixed in xrdp, an open source project which provides a graphical login to remote machines using M…
Three different security flaws have been disclosed in American Megatrends (AMI) MegaRACBaseboard Management Controller (BMC) software that could lead to remote…
Samba this week released patches for an integer overflow vulnerability that could potentially lead to arbitrary code execution.
The syscall.Faccessat function checks whether the calling process can access a file. Faccessat contains a bug where it checks a file's group permission bits if…
Remote arbitrary code execution related to dsi_stream_receive(). (CVE-2021-31439) Remote arbitrary code execution related to parse_entries(). (CVE-2022-23121) …
Romanian cybersecurity technology company Bitdefender on Monday revealed that attempts are being made to target Windows machines with a novel ransomware family…
Multiple unpatched security vulnerabilities have been disclosed in Mitsubishi safety programmable logic controllers (PLCs) that could be exploited by an advers…
An unidentified threat actor has been exploiting a now-patched zero-day flaw in Internet Explorer browser to deliver a fully-featured VBA-based remote access t…
A vulnerability has been found in PyCharm Community and Professional, potentially resulting in arbitrary code execution.
Apache Commons Collections unsafely deserializes untrusted input, potentially resulting in arbitrary code execution.
The maintainers of Exim haveÂreleased patchesÂto remediate as many as 21 security vulnerabilities in its software that could enable unauthenticated attackers t…
Apple has released out-of-band patches for iOS, macOS, watchOS, and Safari web browser to address a security flaw that could allow attackers to run arbitrary c…
Updates to the latest upstream release of Eclipse. See the upstream release notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also cont…
A vulnerability in Kleopatra allows arbitrary execution of code.
Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connectors. Successful attacks require human i…
Microsoft has issued an emergency out-of-band software update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 systems to patch two new recently dis…
Remember the Reverse RDP Attack'wherein a client system vulnerable to a path traversal vulnerability could get compromised when remotely accessing a server ove…
IBM has admitted to making 'a process error, improper response' to a bug report that identified four vulnerabilities in its enterprise security software, and t…
Four popular open-source VNC remote desktop applications have been found vulnerable to a total of 37 security vulnerabilities, many of which went unnoticed for…
An alarming security vulnerability has been discovered in several models of Android smartphones manufactured by Google, Samsung, and others that could allow ma…
Debian announced security fixes for SPIP, addressing issues that permitted unauthorized content modification, data manipulation, and user enumeration. Users ar…
There are lots of books on tools and techniques to secure software containers, but what happens when someone discovers a basic architectural flaw? And what do …
They have demonstrated that users could open up their router's traffic as a result of visiting a web page loaded with malicious javascript. The researchers sai…
