Collaborate Disseminate
WordPress security experts said that 1.5M sites have been defaced following the disclosure of a silently fixed content injection vulnerability. Continue reading 1.5M Unpatched WordPress Sites Hacked Following Vulnerability Disclosure
Google’s Project Zero found a serious hole in Cisco’s WebEx browser extension that is nearly but not yet fully fixed. Here’s what to do. Continue reading Cisco WebEx code execution hole – what you need to know
I recently found myself prototyping an experimental scanning technique
using JXBrowser, a library for using a PhantomJS-like browser in
Java applications. Whilst creating a JavaScript to Java bridge using the JXBrowser library, I wondered if it was p… Continue reading RCE in JXBrowser JavaScript/Java bridge
I recently found myself prototyping an experimental scanning technique
using JXBrowser, a library for using a PhantomJS-like browser in
Java applications. Whilst creating a JavaScript to Java bridge using the JXBrowser library, I wondered if it was p… Continue reading RCE in JXBrowser JavaScript/Java bridge
The Aternity webserver,version 9 and prior,is reportedly vulnerable to cross-site scripting(XSS)on several web pages,and remote code execution via inclusion of untrusted functionality by default due to improper authentication before execution. Continue reading VU#706359: Aternity version 9 vulnerable to cross-site scripting and remote code execution
A vulnerability has been patched in a popular WordPress theme called Neosense that allows an attacker to upload code without authentication. Continue reading Vulnerability Patched in WordPress Theme That Allows Unrestricted Uploads
Developers with the open source content management framework Drupal patched a series of highly critical remote code execution bugs in three separate modules today. If exploited, the bugs could let an attacker take over any site running the modules.
Continue reading Drupal Patches Remote Code Execution Vulnerabilities in Three Modules
Foxit patched a dozen vulnerabilities in its PDF reader software this week, more than half of which could be used to directly execute arbitrary code on vulnerable installations of the product.
Continue reading Foxit Patches 12 Vulnerabilities in PDF Reader
Apple AirPort users, patch ASAP. It sounds as though a crook could take over your AirPort from afar with a sneaky DNS reply… Continue reading Apple AirPort routers get critical security update
At the risk of sounding like a stuck gramophone – Adobe just pushed out a Flash update that patches a zero-day hole. Continue reading Adobe Flash zero-day patch is out…for the third month in a row