remote code execution (RCE) (Page 3)

Microsoft fixes critical remote code execution vulnerability in Office and other 96 flaws in its January patch

On: January 12, 2022

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, Information Security, Log4j, Microsoft, remote code execution (RCE), security flaws, vulnerability, Windows

At the beginning of 2021, Microsoft issued security updates for almost 100 vulnerabilities, among which 9 bugs considered critical stand out. System updates will fix all errors currently identified inRead More →

3 severe vulnerabilities in Django that can leak application data

On: January 4, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), content management system (CMS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Django CMS, Hacking, Information Security, remote code execution (RCE), security flaws, vulnerability

Cybersecurity specialists reported the finding of three vulnerabilities in Django, a free and open source content management system (CMS) platform for publishing content on the Internet. According to the report,Read More →

Critical vulnerabilities in HCL Digital Experience (DX), a platform for creating and managing web portals

On: January 3, 2022

In: Vulnerabilities

Tagged: Cyberattack, cybercrime, cybersecurity, data breach, Hacking, HCL Digital Experience, incidents, Information Security, remote code execution (RCE), Security breach, security flaws, Server-side request forgery (SSRF)

HCL Digital Experience (DX), a platform for creating and managing web platforms, is affected by multiple vulnerabilities that could lead to remote code execution (RCE) scenarios, the researchers claim. AlthoughRead More →

6 critical vulnerabilities in Netgear routers

On: January 3, 2022

In: Vulnerabilities

Tagged: cybersecurity, data leaking, firmware, Hacking, Information Security, Internet of Things (IoT), NETGEAR, Passwords, remote code execution (RCE), Routers, security flaws, technology, usernames, vulnerability

Cybersecurity specialists report the detection of at least six high-risk vulnerabilities and no known updates in the latest firmware version for Netgear Nighthawk R6700v3 routers. These devices are widely usedRead More →

This new rootkit can kill HP servers by exploiting a critical vulnerability in integrated lights-out software

On: December 29, 2021

In: Cyber Security

Tagged: advanced persistent threat (APT), Cyberattack, cybercrime, cybersecurity, firmware, hackers, Hacking, hardware, HP iLO, incidents, malware, remote code execution (RCE), rootkit, security flaws

Specialists from an Iranian security firm report the discovery of a one-of-a-kind rootkit hidden within the firmware of HP Integrated Lights-Out (HP iLO) devices, abused in the wild to eraseRead More →

CVE-2021-44832: The fifth critical vulnerability discovered in the Apache logging library

On: December 29, 2021

In: Vulnerabilities

Tagged: Apache Software Foundation, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, Information Security, Log4j, man-in-the-middle (MITM), remote code execution (RCE), security flaws, security patches, vulnerability

This week, the Apache Software Foundation issued a new set of patches to address remote code execution (RCE) flaws in Log4j, which could be exploited by threat actors to compromiseRead More →

12 critical vulnerabilities in mySCADA myPRO could shutdown lots of manufacturing plants

On: December 27, 2021

In: Vulnerabilities

Tagged: arbitrary code execution, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, Information Security, malware, myPRO, mySCADA, privilege escalation, remote code execution (RCE), security flaws, vulnerability

A cybersecurity specialist reports the detection of a dozen vulnerabilities in myPRO, a product developed by industrial automation firm mySCADA. Among the reported flaws, the expert highlighted an error consideredRead More →

Critical remote code execution vulnerability in Log4j affects VMware Tanzu, vSphere, Site Recovery, Carbon Black, vRealize, and other products

On: December 13, 2021

In: Vulnerabilities

Tagged: Carbon Black, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Hacking, incidents, remote code execution (RCE), security flaws, Site Recovery, Tanzu, technology, VMware, vSphere

During the past week, the detection of CVE-2021-44228, a critical remote code execution (RCE) vulnerability in Log4j, the log library used by thousands of online platforms, was reported. The flawRead More →

TP-Link wireless router vulnerability makes your home network a part of new botnet

On: December 13, 2021

In: Vulnerabilities

Tagged: botnet, cybersecurity, Denial of Service (DDoS), Hacking, incidents, Information Security, malware, Manga botnet, Mirai botnet, remote code execution (RCE), Routers, security flaws, vulnerability

Cybersecurity specialists report the detection of Manga, a new variant of the Mirai botnet focused especially on the compromise of TP-Link routers using the CVE-2021-41653 vulnerability. The flaw affects TL-WE840NRead More →