Collaborate Disseminate
Web analytics firm plugs a hole in its platform that allowed attackers to open a reverse shell that could be used to attack the service. Continue reading SEMrush Plugs Remote Code Execution Bug in Its SaaS Platform
If you need to edit an image, tweak a document or convert a file in a hurry, how can you tell which cloud conversion services to trust? Continue reading Online file conversion services – why trust them?
After the discovery of a critical vulnerability that could have allowed hackers to view private Yahoo Mail images, Yahoo retired the image-processing library ImageMagick.
ImageMagick is an open-source image processing library that lets users resize, s… Continue reading 18-Byte ImageMagick Hack Could Have Leaked Images From Yahoo Mail Server
Widely used image-processing app left site vulnerable to code-execution exploits. Continue reading That critical “ImageTragick” bug Ars warned you about? It cost Facebook $40k
Facebook has awarded US $40,000 to a security researcher who achieved remote code execution on its servers by exploiting a widely-publicised vulnerability.
David Bisson reports.
Continue reading Remote code execution vulnerability affecting Facebook’s servers earns researcher $40,000
Nulled.IO, an underground forum that helped enable users to share stolen credentials and software cracks was hacked earlier this month, spilling a glut of information on its users. Continue reading Info on 500K Users Doxxed in Hacking Forum Dump
So another vulnerability with a name and a logo – ImageTragick? At least this time it’s pretty dangerous, a bunch of ImageMagick Zero-Day vulnerabilities have been announced including one that can leave you susceptible to remote code execution. It’s pretty widely used software too and very public, if you use an app online that lets […]
The…
Read the full post at darknet.org.uk
Continue reading Serious ImageMagick Zero-Day Vulnerabilities – ImageTragick?
Does it help to give a vulnerability a slick-sounding name and fancy logo? Or is it giving us “glamour vulnerability fatigue”? Continue reading Heartbleed, ImageTragick, Badlock – Are we facing a named vulnerability backlash?
A serious zero-day vulnerability has been discovered in ImageMagick, a widely popular software tool used by a large number of websites to process user’s photos, which could allow hackers to execute malicious code remotely on servers.
ImageMagick is an open-source image processing library that lets users resize, scale, crop, watermarking and tweak images.
The ImageMagick tool is supported by
Continue reading Warning — Widely Popular ImageMagick Tool Vulnerable to Remote Code Execution