Collaborate Disseminate
A critical path-traversal flaw (CVE-2020-27130) exists in Cisco Security Manager that lays bare sensitive information to remote, unauthenticated attackers. Continue reading Cisco Patches Critical Flaw After PoC Exploit Code Release
A critical path-traversal flaw (CVE-2020-27130) exists in Cisco Security Manager that lays bare sensitive information to remote, unauthenticated attackers. Continue reading Cisco Patches Critical Flaw After PoC Exploit Code Release
Two bugs (CVE-2020-4703 and CVE-2020-4711) in IBM’s Spectrum Protect Plus data-storage protection solution could enable remote code execution. Continue reading IBM Spectrum Protect Plus Security Open to RCE
A path traversal vulnerability in the iDRAC technology can allow remote attackers to take over control of server operations. Continue reading Researchers Warn of High-Severity Dell PowerEdge Server Flaw
A GitLab path traversal flaw could allow attackers to read arbitrary files and remotely execute code. Continue reading Critical GitLab Flaw Earns Bounty Hunter $20K
The most serious vulnerabilities in Cisco’s 8800 Series IP Phones could allow unauthenticated, remote attackers to conduct a cross-site request forgery attack or write arbitrary files to the filesystem. Continue reading Cisco Patches High-Severity Flaws in IP Phones
The spam campaign is being used to spread a malicious .exe file, taking advantage of a vulnerability in WinRAR which was patched in January. Continue reading Critical WinRAR Flaw Found Actively Being Exploited
Users of the popular file-compression tool are urged to immediately update after a serious code-execution flaw was found in WinRAR. Continue reading 19-Year-Old WinRAR Flaw Plagues 500 Million Users
Six routers with serious security flaws are considered end of life (EOL) and may never be updated. Continue reading Serious D-Link router security flaws may never be patched