A trio of security flaws open the door to remote-code execution and a malware tsunami. The Akkadian Provisioning Manager, which is used as a third-party provisioning...
A security vulnerability in Facebook’s Messenger Rooms video chat feature meant attackers could access a victim’s private Facebook photos and videos, and submit posts, via their locked Android...
GitHub this week disclosed the details of an easy-to-exploit Linux vulnerability that can be leveraged to escalate privileges to root on the targeted system. The flaw,...
The SIP communications protocol can be abused to perform cross-site scripting (XSS) attacks, new research has revealed In a blog post on Thursday (June 10), Enable Security’s Juxhin Dyrmishi Brigjaj...
The board responsible for overseeing the CVE vulnerability identification program has criticized the DWF project for publishing what it says are “unauthorized” CVE records. The Common Vulnerabilities...
The US Cybersecurity and Infrastructure Security Agency (CISA) has launched its first federal civilian vulnerability disclosure policy (VDP) program in partnership with Bugcrowd. The federal government agency launched...
Fedena, an open source school and college management system, contains a raft of zero-day vulnerabilities, with one potentially leading to remote code execution (RCE). With the project seemingly...
Hyperkitty, a web interface for the popular open source mailing list and newsletter management service Mailman, has patched a critical bug that revealed private mailing lists while importing...
This week, security researchers have steered attention towards an interesting finding while using Signal apps across multiple platforms. When you or your contact reinstall the Signal app or switch over...
GitHub announced on Friday their updated community guidelines that explain how the company will deal with exploits and malware samples hosted on their service. To give...
Recent Comments