critical flaw Archives - AZGAD WEBSITE SECURITY BLOG

Tuesday, April 23, 2024

Latest:

U.S. Imposes Visa Restrictions on 13 Linked to Commercial Spyware Misuse
Russia’s APT28 Exploited Windows Print Spooler Flaw to Deploy ‘GooseEgg’ Malware
Russian Hacker Group ToddyCat Uses Advanced Tools for Industrial-Scale Data Theft
Pentera’s 2024 Report Reveals Hundreds of Security Events per Week, Highlighting the Criticality of Continuous Validation
MITRE Corporation Breached by Nation-State Hackers Exploiting Ivanti Flaws

2020-12-10 Lindsey O'Donnell

Critical Steam Flaws Could Let Gamers to Crash Opponents’ Computers

Valve fixed critical bugs in its Steam gaming client, which is a platform for popular video games like Counter Strike: Global Offensive, Dota2 and Half Life.

Adobe Adobe Experience Manager adobe Lightroom adobe prelude arbitrary code execution blind server-side request forgery critical flaw CVE-2020-24440 CVE-2020-24444 CVE-2020-24445 CVE-2020-24447 macOS Vulnerabilities Windows

2020-12-08 Lindsey O'Donnell

Adobe Warns Windows, macOS Users of Critical-Severity Flaws

Adobe fixed three critical-severity flaws in Adobe Prelude, Adobe Experience Manager and Adobe Lightroom.

active attack critical flaw CVE-2020-1472 CVE-2020-15505 Exploit Hacks healthcare security Local Government Security Microsoft Windows mobileiron Netlogon RCE remote code execution Vulnerabilities zerologon

2020-11-25 Lindsey O'Donnell

Critical MobileIron RCE Flaw Under Active Attack

Attackers are targeting the critical remote code-execution flaw to compromise systems in the healthcare, local government, logistics and legal sectors, among others.

Cisco cisco high severity flaw cisco security manager critical flaw CVE-2020-27130 exploit code florian hauser hack malicious java object patch path traversal attack path traversal flaw poc exploit code Proof of Concept Remote Attack Vulnerabilities Web Security

2020-11-17 Lindsey O'Donnell

Cisco Patches Critical Flaw After PoC Exploit Code Release

A critical path-traversal flaw (CVE-2020-27130) exists in Cisco Security Manager that lays bare sensitive information to remote, unauthenticated attackers.

Bug critical flaw CVE-2020-3992 ESXi OpenSLP remote code execution use-after-free version ESXi70U1a-17119627 vmware Vulnerabilities Web Security

2020-11-04 Lindsey O'Donnell

VMware Issues Updated Fix For Critical ESXi Flaw

A previous fix for the critical remote code execution bug was “incomplete,” according to VMware.

Bug critical flaw CVE-2020-3992 ESXi OpenSLP remote code execution use-after-free version ESXi70U1a-17119627 vmware Vulnerabilities Web Security

2020-11-04 Lindsey O'Donnell

VMware Issues Updated Fix For Critical ESXi Flaw

A previous fix for the critical remote code execution bug was “incomplete,” according to VMware.

Adobe code execution critical flaw CVE-2020-24400 CVE-2020-24407 eCommerce File Upload Allow List Bypass fix magecart Magento patch pre-authorization sql injection Vulnerabilities Web Security

2020-10-16 Lindsey O'Donnell

Critical Magento Holes Open Online Shops to Code Execution

Adobe says the two critical flaws (CVE-2020-24407 and CVE-2020-24400) could allow arbitrary code execution as well as read or write access to the database.