A HTTP request smuggling vulnerability in Apache Tomcat has been present “since at least 2015”, the project maintainers have warned. Apache Tomcat is an open source Java servlet container which...
Security vulnerabilities in online text editor Etherpad could allow attackers to remotely compromise a victim’s server and steal sensitive information, new research reveals. A cross-site scripting flaw (XSS)...
UPDATED SolarWinds has patched a remote code execution (RCE) vulnerability in its Serv-U file transfer products after Microsoft observed exploitation against “a limited, targeted set of customers” by “a...
Security researchers at Randorisec have uncovered numerous severe vulnerabilities in IP camera firmware from UDP Technology. UDP firmware is bundled in cameras from a variety of vendors including...
Iran’s Transport Ministry has confirmed that it was hit by a cyberattack, which caused the portal page of the Ministry and its affiliated pages to go...
SolarWinds is urging customers to patch a Serv-U remote code execution vulnerability that was exploited in the wild by “a single threat actor” in attacks targeting a limited...
Microsoft has awarded $13.6 million to security researchers under it bug bounty program in the past 12 months alone. The tech giant, which runs a number of technology-specific...
CISA Has Recently Informed Enterprises in an Advisory About 15 Philips Vue Vulnerabilities That Can Be Found in the Healthcare Products of Philips Vue PACS. CISA...
Dutch security researchers were working with Kaseya to get an authentication bypass flaw and other bugs patched when the catastrophic supply chain attack occurred. In the...
Researchers reported earlier this week that they had identified four vulnerabilities in Sage X3’s enterprise, resource and planning (ERP) supply chain software that if left unpatched,...