Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It

Flash Player Type Confusion Critical Vulnerability, Another Reason Not to Use It

Successful exploitation can lead to arbitrary code execution

Code Execution Vulnerability Patched in Cross-Platform MKVToolNix Toolset

Code Execution Vulnerability Patched in Cross-Platform MKVToolNix Toolset

The use-after-free bug was found in the mkvinfo utility

Sophos Patches RCE and Memory Disclosure Vulnerabilities in HitmanPro.Alert

Sophos Patches RCE and Memory Disclosure Vulnerabilities in HitmanPro.Alert

Issues found in input/output control (IOCTL) message handler

Code Execution Vulnerability Patched in Library Used by VLC, Other Media Players

Code Execution Vulnerability Patched in Library Used by VLC, Other Media Players

The stack-based buffer overflow can be exploited remotely

Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor

Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor

Vendor released patched version after disclosure

Magento-Powered Online Shops Susceptible to Financial Data Theft

Magento-Powered Online Shops Susceptible to Financial Data Theft

Attackers could access payment card info and customer data

Flash Player Bug Allows Video, Audio Recording Without User Consent

Flash Player Bug Allows Video, Audio Recording Without User Consent

Glitch can be used to trigger flaw leading to code execution

Millions of Computers Have Backdoor Enabled by Default

Millions of Computers Have Backdoor Enabled by Default

Legitimate software behaves like malware, whitelisted by antivirus products

Nginx 1.4.1 and 1.5.0 Released to Fix Arbitrary Code Execution Vulnerability

Nginx 1.4.1 and 1.5.0 Released to Fix Arbitrary Code Execution Vulnerability

A patch and a workaround have also been made available

Foxit Reader 5.4.5 Released to Address Arbitrary Code Execution Vulnerability

Foxit Reader 5.4.5 Released to Address Arbitrary Code Execution Vulnerability

Download the updated version of the application from here

Kernel Vulnerability in Cisco Phones Can Be Exploited for Covert Surveillance – Video

Kernel Vulnerability in Cisco Phones Can Be Exploited for Covert Surveillance – Video

The security hole has been identified by Ang Cui and Michael Costello

Adobe Flash Player 11.5 Addresses Critical Vulnerabilities

Adobe Flash Player 11.5 Addresses Critical Vulnerabilities

Security flaws could lead to code execution in unpatched versions

Cisco Identifies DOS and Code Execution Flaws in Four TelePresence Products

Cisco Identifies DOS and Code Execution Flaws in Four TelePresence Products

The company has released software updates for most of the vulnerabilities

HP Patches Code Execution Bugs That Affect "Operations Agent"

HP Patches Code Execution Bugs That Affect "Operations Agent"

Products designed for AIX, HP-UX, Windows, Linux and Solaris impacted

Patch Released by PHP to Address CGI Bug Not Effective

Patch Released by PHP to Address CGI Bug Not Effective

De Eindbazen also issued a fix that can be applied on top of the one from PHP

Facebook Partially "Vulnerable" to PHP-CGI Bug, Security Expert Finds (Updated)

Facebook Partially "Vulnerable" to PHP-CGI Bug, Security Expert Finds (Updated)

Robbert Fuller made a simple POC which discloses part of the site's source code

 
Want more? Browse: