Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server…
Researchers found two security vulnerabilities affecting the Magento database plugin MAGMI. These flaws could allow remote code execution attacks. MAGMISerious…
Cyberattacks on small to medium-sized businesses (SMBs) are continuing at a relentless pace, with the vast majority of data breaches coming from outside the or…
An issue was discovered in Squid before 4.13. Due to incorrect data validation, HTTP Request Smuggling attacks may succeed against HTTP and HTTPS traffic. This…
A vulnerability in chrony may allow a privileged attacker to cause data loss via a symlink.
In inetutils-telnetd, an implementation of a telnet daemon, arbitrary remote code execution might have been possible via short writes or urgent data.
Several vulnerabilities have been discovered in sqlite3, a C library that implements an SQL database engine. CVE-2018-8740
Integer overflow due to missing input sanitation in rdpegfx channel. The input rectangles from the server are not checked against local surface coordinates and…
Allocation for pixmap data in AllocatePixmap() does not initialize the memory in xserver, it leads to leak uninitialize heap memory to clients. When the X serv…
It was reported that firejail does not respect the end-of-options separator ("--"), allowing an attacker with control over the command line options of the sand…
Servers where the Handler concurrently reads the request body and writes a response can encounter a data race and crash. The httputil.ReverseProxy Handler is a…
Andres Freund found an issue in the PostgreSQL database system where an uncontrolled search path could allow users to run arbitrary SQL functions with elevated…
The NSA and FBI warn that a new Linux malware variant - dubbed Drovorub - is being used by APT 28 to compromise networks, execute malicious commands and steal …
New research disclosed a string of severe security vulnerabilities in the 'Find My Mobile''an Android app that comes pre-installed on most Samsung smartphones'…
A security researcher earlier today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulne…
Popular video conferencing app Zoom has addressed several security vulnerabilities, two of which affect its Linux client that could have allowed an attacker wi…
Popular data breach logging website 'Have I Been Pwned' has now announced the code base of 'Have I Been Pwned''Have I Been Pwned' Code Base Goes Open Source on…
Multiple security vulnerabilites in virtualbox allow unauthorized access to critical data or takeover of Oracle VM VirtualBox. See CVE references for details. …
In today's digital world, data is a valuable resource and its security has become a paramount business for digital serviceWhat Hacking Is And How Should Your B…
Cybersecurity researchers have discovered critical vulnerabilities in industrial VPN implementations primarily used to provide remote access to operational tec…
A vulnerbailty was found in curl, a command line tool for transferring data with URL syntax.
Cybersecurity researchers on Thursday revealed security issues in the Android app developed by Chinese drone-maker Da Jiang Innovations (DJI) that comes with a…
Are you using full-disk encryption to protect your data? If so, you may want to reconsider after reading this article.
Multiple vulnerabilities have been found in cURL, the worst of which could result in information disclosure or data loss.
