PHPMailer Bug Leaves Millions of Websites Open to Attack

A critical PHPMailer bug tied to the way websites handle email and feedback forms is leaving millions of websites hosted on popular web-publishing platforms such as WordPress, Drupal and Joomla open to attack. Continue reading PHPMailer Bug Leaves Millions of Websites Open to Attack

Critical MySQL Vulnerabilities Can Lead to Server Compromise

Critical vulnerabilities in MySQL and database servers MariaDB and PerconaDB can lead to arbitrary code execution, root privilege escalation, and server compromise. Continue reading Critical MySQL Vulnerabilities Can Lead to Server Compromise

Patched ColdFusion Flaw Exposes Applications to Attack

Adobe pushed hotfixes to ColdFusion 11 and 10 installations addressing a XXE vulnerability that can be exploited processing OOXML documents. Continue reading Patched ColdFusion Flaw Exposes Applications to Attack

vBulletin Patches Serious Flaw in Forum Software

A serious vulnerability has been patched in forum software made by vBulletin that could allow attackers to scan servers hosting the package and possibly execute arbitrary code. Continue reading vBulletin Patches Serious Flaw in Forum Software