The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that the autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory (CVE-2019-20079). References: - https://bugs.mageia.org/sho…
Malformed request header may cause route matchers or access controls to be bypassed, resulting in escalation of privileges or information disclosure (CVE-2019-…
Updated sympa packages fix security vulnerability: Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temp…
Researchers found a critical vulnerability in CODESYS web server that could allow an attacker to conduct remote attacks. Fortunately, theHighly Critical And Ea…
Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code.
Multiple vulnerabilities have been found in GNU IDN Library 2, the worst of which could result in the remote execution of arbitrary code.
A buffer overflow in GNU Screen might allow remote attackers to corrupt memory.
Cybersecurity researchers with Qihoo 360's NetLab today unveiled details of two recently spotted zero-day cyberattack campaigns in the wild targeting enterpris…
A newly discovered watering-hole campaign is targeting Apple iPhone users in Hong Kong by using malicious website links as a lure to install spyware on the dev…
Multiple vulnerabilities have been found in Pure-FTPd, the worst of which could allow remote attackers to cause a Denial of Service condition. [More...]
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code. [More...]
Multiple vulnerabilities have been found in Samba, the worst of which could lead to remote code execution.
Multiple vulnerabilities have been found in WeeChat, the worst of which could allow remote attackers to cause a Denial of Service condition.
Multiple vulnerabilities were found in Tor, the worst of which could allow remote attackers to cause a Denial of Service condition.
A vulnerability in BlueZ might allow remote attackers to bypass security restrictions.
A cybersecurity researcher today disclosed technical details and proof-of-concept of a critical remote code execution vulnerability affecting OpenWrt, a widely…
Microsoft today issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities that could let hackers…
A new version of the infamous Mirai botnet is exploiting a recently uncovered critical vulnerability in network-attached storage (NAS) devices in an attempt to…
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files.
A vulnerability in Exim could allow a remote attacker to execute arbitrary code.
The package chromium before version 80.0.3987.149-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution and informat…
A heap-based buffer overflow in Binary diff might allow remote attackers to execute arbitrary code.
A heap-based buffer overflow in GNU FriBidi might allow remote attackers to execute arbitrary code.
Multiple vulnerabilities have been found in Cacti, the worst of which could lead to the remote execution of arbitrary code.