5 Popular Web Hosting Services Found Vulnerable to Multiple Flaws

A security researcher has discovered multiple one-click client-side vulnerabilities in the some of the world’s most popular and widely-used web hosting companies that could have put millions of their customers as well as billions of their sites’ visito… Continue reading 5 Popular Web Hosting Services Found Vulnerable to Multiple Flaws

SSD Advisory – SME Server Unauthenticated XSS To Privileged Remote Code Execution

Vulnerabilities Summary The following advisory describes a vulnerability in SME Server 9.2, which lets an unauthenticated attackers perform XSS attack that leads to remote code execution as root. SME Server is a Linux distribution for small and medium … Continue reading SSD Advisory – SME Server Unauthenticated XSS To Privileged Remote Code Execution

WordPress 5.0 Gets Security Patch a Week After Release

Only a week has passed since the release of WordPress 5.0—a new major version codenamed “Bebo”—and the WordPress team has already pushed out a security update for it. WordPress 5.0.1, released Dec. 13, fixes seven vulnerabilities, some of … Continue reading WordPress 5.0 Gets Security Patch a Week After Release

phpMyAdmin Releases Critical Software Update — Patch Your Sites Now!

Developers of phpMyAdmin, one of the most popular and widely used MySQL database management systems, today released an updated version 4.8.4 of its software to patch several important vulnerabilities that could eventually allow remote attackers to take… Continue reading phpMyAdmin Releases Critical Software Update — Patch Your Sites Now!

DJI Patches Forum Bug That Allowed Drone Account Takeovers

Bug opened door for malicious link attack, giving hacker access to stored DJI drone data of commercial and consumer customers. Continue reading DJI Patches Forum Bug That Allowed Drone Account Takeovers

Magecart Injects Skimmer Code in Customer Rating Widget

The groups of attackers who specialize in injecting payment card skimmer code called Magecart into online shops managed to compromise a third-party customer rating plugin called Shopper Approved that’s used by thousands of websites. The compromi… Continue reading Magecart Injects Skimmer Code in Customer Rating Widget