Retbleed: Intel and AMD Processors Information Disclosure Vulnerability. Patch Now!
A new Speculative execution attack is discovered that affects both Intel and AMD processors that can result in information disclosure…
Atlassian Confluence Server and Data Center Zero Day Vulnerability Under Active Exploitation. Patch Now!
An OGNL Injection Vulnerability was discovered in Atlassian Confluence Server and Data Center, and it is tracked with CVE-2022-26134. This…
Follina: Microsoft Support Diagnostic Tool RCE Vulnerability Under Active Exploitation
A remote code execution vulnerability was discovered in MSDT (Microsoft Support Diagnostic Tool), and it is tracked with CVE-2022-30190. The vulnerability…
Critical Alert: Spring Core(SpringShell) Remote Code Execution Vulnerability Exploited In The Wild
The Spring Framework is an application framework and inversion of the control container for the Java platform developed by VMware.…
Apple Has Addressed A Zero-Day Vulnerability Which Is Being Actively Exploited In The Wild
This year, Apple released security updates for their third zero-day vulnerability. The affected software processes maliciously crafted web content, leading…
Log4Shell-Critical Remote Code Execution Vulnerability in H2database Console
JFrog has recently disclosed a remote code execution vulnerability on H2 Database consoles. This is based on a Java Naming…
Intel Addresses 3 High Severity Vulnerabilities in BIOS of Several Processors
Intel has recently disclosed a short advisory with details of high-severity for 3 CVEs here. They are CVE-2021-0157, CVE-2021-0158, and…
AgeLocker Ransomware Targeting QNAP NAS Devices
AgeLocker Ransomware targeting QNAP network-attached storage (NAS) devices have been used by attackers to encrypt user data and demand a…
Cisco Read-Only Path Traversal Vulnerability (CVE-2020-3452)
Cisco has released a Security Advisory for the actively exploited worldwide CVE-2020-3452. Cisco Read-Only Path Traversal Vulnerability in the web services…
Unpatched Zero-Day Vulnerabilities Put IBM Data Risk Manager At Risk
A security researcher recently uncovered four vulnerabilities in IBM Data Risk Manager and publicly disclosed them following a refusal from…