Security
-
CSRF Vulnerability in phpMyAdmin 4.7.x Lets Attackers Delete Records through malicious URLs
A Cross-Site Request Forgery (CSRF) vulnerability has been found in the phpMyAdmin version 4.7.x (before version 4.7.7) through which malicious…
Read More » -
DoS Vulnerability found in the New Contact Name Field of Microsoft’s People Application
Microsoft has its own centralized address book that combines all your social calls, communications, and connections into one place under…
Read More » -
Local Privilege Escalation Vulnerability found in Go Pro Fusion Studio v1.2
A local privilege escalation vulnerability exists in the Go Pro Fusion Studio version 1.2. Go Pro Fusion Studio is a…
Read More » -
MEGA Updates Chrome’s trojaned Extension with a cleaner Version 3.39.5
MEGA Chrome’s trojaned extension was updated with a cleaner version 3.39.5 after an unknown attacker uploaded the trojaned version to…
Read More » -
DoS & Memory Corruption Vulnerabilities found in Skype Empresarial v16.0.10730.20053
A denial of service vulnerability has been found in the Skype Empresarial Office 365 version 16.0.10730.20053. It was first discovered…
Read More » -
Nord VPN v6.14.31 suffers from Local Vector DoS Vulnerability
A denial of service vulnerability was found in the Nord VPN version 6.14.31 on the 30th of August, 2018. This…
Read More » -
Amazon Alexa Security Risk Allows Hackers to Take Over Voice Commands, Steal Private Information
The world is changing and in the modern era, we are becoming reliant on our Internet of Things devices by…
Read More » -
Data Backed Up from WhatsApp to Google Drive Will Be ‘plaintext’
According to a recent announcement by Google, Android and iOS users will now be able to backup their Whatsapp data…
Read More » -
Slackware Releases L1TF Mitigation Updates for v14.2
The Slackware Linux Project team has just released kernel updates for its Slackware version 14.2 which was initially released on…
Read More » -
DLL Injection and Code Execution Vulnerability in v54.5.90 lets Hackers spread Malware
A DLL hijacking injection and code execution vulnerability has been found in the cloud based storage solution: Dropbox. The vulnerability…
Read More » -
WhatsApp Vulnerable to Memory Corruption and DoS Crash with Crafted Message in v2.18.61
WhatsApp is not new to memory corruption vulnerabilities. After a series of infamous and chronically frustrating special character message circulations…
Read More » -
Command Injection Vulnerability found in WordPress Plainview Activity Monitor v20161228 and Prior
A command injection vulnerability has been found in the renowned personal blogging and website creation management platform: WordPress. The vulnerability…
Read More » -
Mitigation Updates Released by Microsoft for L1 Terminal Fault which lets Hackers Remotely Access Privileged Data
Microsoft released numerous advisories since the beginning of the year to address the speculative execution side channel hardware vulnerabilities in…
Read More » -
SQL Injection Vulnerabilities in Seagate Personal Cloud Media Server allow Retrieval of Private Data
The Seagate Media Server is a UPnp / DLNA Network Attached Storage mechanism incorporated into the Seagate Personal Cloud for…
Read More » -
Adobe Patches 2 Code Execution Vulnerabilities in Photoshop CC 2017 & 2018
Hot off the discovery board is news of two important vulnerabilities that have been found in Adobe’s Photoshop CC versions…
Read More » -
Spectre and Foreshadow Mitigation Updates Released for Windows 10 v1803 April Update and Server Core
After the Spectre and Metldown vulnerabilities discovered in the Intel micro processing chips widely used in computing devices, Foreshadow has…
Read More » -
Airmail 3.6 Fixes Potential URL Scheme Vulnerability
Airmail has just released an update which patches a known security vulnerability in the e-mailing service. Security analysts recently discovered…
Read More » -
Ghostscript Vulnerability Could Cause Data Security Breach
A vulnerability in the Ghostscript interpreter used to decipher Adobe Postscript and PDF documents online has come to light after…
Read More » -
Philips to look into PageWriter Cardiograph Device Vulnerabilities Mid 2019
Philips is known for producing high end and efficient PageWriter Cardiograph devices. After the recent discovery of cyber security vulnerabilities…
Read More » -
Cisco, Huawei, ZyXel, and Huawei patch Cryptographic IPSEC IKE Vulnerability
Researchers from the Ruhr-Universitat Bochum: Dennis Felsch, Martin Grothe, and Jorg Schwenk, and researchers from the University of Opole: Adam…
Read More » -
Android August Security Update Released for Nokia 8
After the implementation of Android’s August Security Update on the Nokia phones 5, 6, and 7, the Nokia 8 is…
Read More » -
Firefox Security Add-on on 222k Devices Found Sending Browsing Data to Remote German Server
There is a popular browser add-on which is installed by 222,746 Firefox users according to Mozilla’s own statistics of add-on…
Read More » -
Synthetic UI Interactions on MacOS could generate Single Clicks for Privilege Escalation and Whole System Compromise
Defcon was held in Las Vegas last week. At the event, a speaker, Patrick Wardle, Chief Research Officer of Digita…
Read More » -
Microsoft Patch Tuesday 17134.228 Enhances Battery Performance and Mitigates L1TF Vulnerability
Microsoft has just come out with its own “Patch Tuesday” update for its Windows 10 operating system. Users on the…
Read More » -
Adobe’s August Patch fixes 11 Flaws in Flash Player and Acrobat DC + Reader
Following Adobe’s fix of a grand 112 vulnerabilities in its July product range patch, the company has just released its…
Read More »
