Weekly Vulnerability Recap - October 2, 2023 - Cloudflare DDoS Exploit
Get a recap of all of the vulnerabilities exploited last week - including vulnerabilities from WS_FTP, Exim, Cisco and more.
Source: esecurityplanet.com
๐ฐ Remote Code Execution News
Page 7 - Remote Code Execution News Today
Fast, Ad-Free News Updates
Stay updated with breaking news from Remote Code Execution. Real-time updates on events, politics, business and more.
Atlassian releases security updates to address high-severity bugs
Company advises users to upgrade their instances to the latest available version
Confluence Data Center Bitbucket Data Center Jira Service Management Data Center Bamboo Data Center Apache Tomcat Security Vulnerabilities
Source: computing.co.uk
North Korea hacking group targeting healthcare
HHS has warned of a vulnerability in ManageEngine products exploited by North Korean state-sponsored hacking group, Lazarus Group, to target U.S. healthcare.
Source: beckershospitalreview.com
Critical updates for Microsoft Office and Visual Studio drive September's Patch Tuesday
Microsoft this week rolled out 59 updates with its Patch Tuesday update, including critical patches for Microsoft Office and Visual Studio.
Vmware Esxi Microsoft Exchange Server Exchange Server Server Service Information Disclosure Vulnerability Microsoft Office Microsoft Windows Codecs Library
Source: computerworld.com
OpenPLC Webserver 3 Denial Of Service / Buffer Overflow
Import requestsimport sysimport timeimport optparseimport reparser = optparse.OptionParser()parser.add_option('-u', '--url', action="store", dest="url", help="Base target uri (ex. http://target-uri:8080)")parser.add_option('-l', '--user', action="store", dest="user", help="User credential to login")parser.add_option('-p', '--passw', action="store", dest="passw&qu...
Source: kizzmyanthia.com
Android's September security update fixes actively exploited zero-day and more
A high-severity vulnerability is being patched in the soon-to-be-released September Android security update, along with critical vulnerabilities. Heres what you need to know.
Source: zdnet.com
GOM Player 2.3.90.5360 MITM / Remote Code Execution
# Exploit Title: GOM Player 2.3.90.5360 - Remote Code Execution (RCE)# Date: 26.08.2023# Author: M. Akil Gรผndoฤan# Contact: https://twitter.com/akilgundogan# Vendor Homepage: https://www.gomlab.com/gomplayer-media-player/# Software Link: https://cdn.gomlab.com/gretech/player/GOMPLAYERGLOBALSETUP_NEW.EXE# Version: 2.3.90.5360 # Tested on: Windows 10 Pro x64 22H2 19045.3324# PoC Video: https://www.youtube.com/watch?v=8d0YUpdPzp8# Impacts: GOM player has been downloaded 63,952,102 times according...
Source: kizzmyanthia.com
Forminator WordPress Plugin Vulnerability Affects Up To 400,000+ Websites
Forminator WordPress Contact form installed in over 400,000 Websites patched a critical vulnerability rated 9.8/10
Forminator Changelog Us Government National Vulnerability Database National Vulnerability Database Forminator Wordpress Contact Form Forminator Wordpress Plugin Remote Code Execution
Source: searchenginejournal.com
Resecurity Recognized for Ethical Vulnerability Disclosure in Products of Apple, Oracle and Schneider Electric
/PRNewswire/ -- Resecurity, Inc. (USA), a global cybersecurity solutions provider protecting Fortune 500 and government agencies worldwide, is proud to...
Source: prnewswire.com
WinRAR's latest release fixes a dangerous RCE security vulnerability
The Zero Day Initiative (ZDI) recently identified a high-severity vulnerability in WinRAR, the Windows-only application created by Eugene Roshal for managing RAR archives. This bug, labeled CVE-2023-40477,...
Source: techspot.com