Drupal updated the severity of a remote code execution (RCE) vulnerability to “Highly Critical” after known exploits were discovered.
Drupal Highly Critical RCE vulnerability has known public exploits Read More »
Cisco’s Talos security group disclosed four vulnerabilities that impact the TP-Link TL-R600VPN router. Several of the discovered bugs could lead to remote code execution.
Multiple TP-Link router vulnerabilities discovered Read More »
The Apache Software Foundation has released a security advisory that fixes a vulnerability in Commons FileUpload library in Apache Struts versions 2.3.36 and prior.
Apache Struts security patch Read More »
A proof-of-concept (POC) has been released for an exploit of a recently patched Microsoft Edge vulnerability.
Microsoft Edge RCE vulnerability POC exploit Read More »
Microsoft issued the October 2018 Security Updates that include nearly 50 unique vulnerability fixes, 12 of them rated critical.
Microsoft October 2018 security updates Read More »
Cisco released a security update to address three high severity remote code execution vulnerabilities in Cisco Webex Network Recording Player.
Cisco Webex vulnerabilities Read More »
Security researchers have discovered proof-of-concept code of an Apache Struts vulnerability exploit, to include a Python script that makes it easier to exploit.
Apache Struts vulnerability exploit POC published Read More »
The Apache Software Foundation has issued a security update for a critical remote code execution (RCE) vulnerability (CVE-2018-11776) in Apache Struts 2.
Apache Struts 2 critical RCE vulnerability Read More »
Microsoft issued a security advisory for a remote code execution (RCE) vulnerability that exists on the Windows Host Compute Service Shim (hcsshim) library, an open source tool used to import Docker containers and run on Windows systems.
Microsoft container tool patch Read More »
Drupal issued a security advisory (SA-CORE-2018-004) on Wednesday to address a Highly Critical Remote Code Execution vulnerability (CVE-2018-7602). It is important to note this vulnerability is being exploited in the wild. An excerpt from the advisory:  “A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors
Drupal security update Read More »
