Vulnerabilities (Page 20)

Cyber Security Vulnerabilities | Infosec Vulnerabilities | Information Security Vulnerabilities | Bug bounty

3 severe vulnerabilities in Django that can leak application data

On: January 4, 2022

Tagged: Common Vulnerability Scoring System (CVSS), content management system (CMS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Django CMS, Hacking, Information Security, remote code execution (RCE), security flaws, vulnerability

Cybersecurity specialists reported the finding of three vulnerabilities in Django, a free and open source content management system (CMS) platform for publishing content on the Internet. According to the report,Read More →

New zero day attack on iPads and iPhones turns them into unusable objects

On: January 4, 2022

In: Vulnerabilities

Tagged: Apple, Apple HomeKit, Cyberattack, cybersecurity, Denial of Service (DDoS), Hacking, incidents, Information Security, Internet of Things (IoT), iOS, iPad, iPod, security flaws, Smartphones

Trevor Spiniolas is a renowned mobile security researcher who has reported various issues and bugs affecting multiple commonly used technological devices. In his latest report, the expert details the findingRead More →

Critical vulnerabilities in HCL Digital Experience (DX), a platform for creating and managing web portals

On: January 3, 2022

In: Vulnerabilities

Tagged: Cyberattack, cybercrime, cybersecurity, data breach, Hacking, HCL Digital Experience, incidents, Information Security, remote code execution (RCE), Security breach, security flaws, Server-side request forgery (SSRF)

HCL Digital Experience (DX), a platform for creating and managing web platforms, is affected by multiple vulnerabilities that could lead to remote code execution (RCE) scenarios, the researchers claim. AlthoughRead More →

6 critical vulnerabilities in Netgear routers

On: January 3, 2022

In: Vulnerabilities

Tagged: cybersecurity, data leaking, firmware, Hacking, Information Security, Internet of Things (IoT), NETGEAR, Passwords, remote code execution (RCE), Routers, security flaws, technology, usernames, vulnerability

Cybersecurity specialists report the detection of at least six high-risk vulnerabilities and no known updates in the latest firmware version for Netgear Nighthawk R6700v3 routers. These devices are widely usedRead More →

CVE-2021-44832: The fifth critical vulnerability discovered in the Apache logging library

On: December 29, 2021

In: Vulnerabilities

Tagged: Apache Software Foundation, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, Information Security, Log4j, man-in-the-middle (MITM), remote code execution (RCE), security flaws, security patches, vulnerability

This week, the Apache Software Foundation issued a new set of patches to address remote code execution (RCE) flaws in Log4j, which could be exploited by threat actors to compromiseRead More →

12 critical vulnerabilities in mySCADA myPRO could shutdown lots of manufacturing plants

On: December 27, 2021

In: Vulnerabilities

Tagged: arbitrary code execution, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, Information Security, malware, myPRO, mySCADA, privilege escalation, remote code execution (RCE), security flaws, vulnerability

A cybersecurity specialist reports the detection of a dozen vulnerabilities in myPRO, a product developed by industrial automation firm mySCADA. Among the reported flaws, the expert highlighted an error consideredRead More →

Critical vulnerability breaks Site Isolation feature in Google Chrome. Update immediately

On: December 21, 2021

In: Vulnerabilities

Tagged: Chrome, Cyberattack, cybercrime, cybersecurity, Firefox, Google, Google Project Zero, Hacking, incidents, Information Security, security flaws, Site Isolation, vulnerability, Web Browsers

Cybersecurity specialists report the detection of a flaw that would allow threat actors to abuse a set of load optimization features in Google Chrome to evade the Site Isolation feature.Read More →

New critical vulnerabilities in Zoho ManageEngine exploited by hackers

On: December 21, 2021

In: Vulnerabilities

Tagged: advanced persistent threat (APT), Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Federal Bureau of Investigation (FBI), Hacking, Information Security, Microsoft, security flaws, Zoho, Zoho ManageEngine

The cybersecurity unit of the Federal Bureau of Investigation (FBI) has launched an alert to notify organizations using ManageEngine Desktop Central, developed by Zoho, that a hacking group is exploitingRead More →

Free tool to detect Log4j components in your network infrastructure: Check if your servers are vulnerable

On: December 20, 2021

In: Vulnerabilities

Tagged: Cyberattack, cybersecurity, GitHub, Hacking, Hacking Tools, Information Security, Linux, Log4j, macOS, network security, operating systems, security flaws, vulnerability, Windows

Exploiting vulnerabilities detected in previous versions of Log4j remains a severe issue, so the cybersecurity community is still looking for the best ways to prevent a cyberattack. However, some usersRead More →