Hackers Exploit SQL Injection & Code Execution Zero-day Bugs in Sophos Firewall
Sophos patched a SQL injection flaw with XG Firewall product that exploited by attackers in the wild. Sophos informed about the bug on
[...]
execution
80% of Exchange Servers Still Unpatched to Critical Remote Code Execution Vulnerability
Microsoft recently patched a remote code execution vulnerability with Microsoft Exchange Server that allows an attacker to use an Exchange user account to
[...]
Critical CODESYS Bug Allows Remote Code Execution
CVE-2020-10245, a heap-based buffer overflow that rates 10 out of 10 in severity, exists in the CODESYS web server and takes little skill
[...]
Critical Remote Code Execution Bug in Linux Based OpenWrt OS Affects Millions of Network Devices
Security researcher uncovered a critical remote code execution vulnerability in OpenWrt operating system that allows attackers to inject the malicious payload on the
[...]
Microsoft Patches Leaked Remote Code Execution Flaw
A vulnerability in Microsoft’s Server Message Block protocol prompted concerns of wormable exploits when it was disclosed this week.
Source: Dark Reading
[...]
Critical Flaws in Magento e-Commerce Platform Allow Code-Execution
Admins are encouraged to update their websites to stave off attacks from Magecart card-skimmers and others.
Source: Threat Post – Web Security
[...]
PoC Exploit Code Released for Citrix ACD and Gateway Remote Code Execution Vulnerability
Citrix remote code execution vulnerability was published last month, the vulnerability can be tracked as CVE-2019-19781. It may create a serious threat for
[...]
Cisco Webex Bug Allows Remote Code Execution
Cisco patched two high-severity flaws this week, in its Webex and IOS XE Software products.
Source: Threat Post – Web Security –
[...]
Hackers Scanning for Citrix Servers Vulnerable to Remote Code Execution
Researchers spotted active scans targeting Application Delivery Controller and Citrix Gateway to exploit Critical Vulnerability CVE-2019-19781. This vulnerability can be exploited remotely, successful
[...]
WhatsApp Remote Code Execution Triggered by Videos
The flaw can be trivially exploited.
Source: Threat Post – Web Security – WhatsApp Remote Code Execution Triggered by Videos
[...]