exploit

Attackers are weaponizing more vulnerabilities than ever before

April 23, 2019

2018 had the most weaponized vulnerabilities ever (177), which represents a 139% increase compared to 2017, according to the RiskSense latest report. In addition, the rate of …

PoC exploit for Carpe Diem Apache bug released

April 9, 2019

Charles Fol, the security engineer that unearthed the Carpe Diem Apache HTTP Server bug (CVE-2019-0211), has released an exploit for it. “This is between a POC and a …

Magento sites under attack through easily exploitable SQLi flaw

April 8, 2019

A recently patched SQL injection flaw affecting the popular open-source e-commerce platform Magento is being actively exploited by attackers, so if you haven’t …

Consumer routers targeted by DNS hijacking attackers

April 5, 2019

Owners of a slew of D-Link, ARGtek, DSLink, Secutech, TOTOLINK and Cisco consumer routers are urged to update their device’s firmware, lest they fall prey to ongoing DNS …

Google plugs Chrome zero-day exploited in the wild

March 6, 2019

If you’re using Google’s Chrome browser and have not yet upgraded to the latest available version, do so now or risk being hit by attackers. About CVE-2019-5786 …

Latest WinRAR, Drupal flaws under active exploitation

February 26, 2019

CVE-2018-20250, a WinRAR vulnerability that allows attackers to extract a malicious executable to one of the Windows Startup folder to be executed every time the system is …

500 million WinRAR users open to compromise via a 19-year-old flaw

February 21, 2019

A vulnerability affecting all versions of WinRAR, the popular file archiver utility for Windows, could be exploited by attackers to deliver malware via specially crafted ACE …

Rockwell Automation industrial energy meter vulnerable to public exploits

February 20, 2019

A low-skilled, remote attacker could use publicly available exploits to gain access to and mess with a power monitor by Rockwell Automation that is used by energy companies …

Snapd flaw gives attackers root access on Linux systems

February 13, 2019

A vulnerability affecting Snapd – a package installed by default in Ubuntu and used by other Linux distributions such as Debian, OpenSUSE, Arch Linux, Fedora and Solus …

Malicious macros can trigger RCE in LibreOffice, OpenOffice

February 7, 2019

Achieving remote code execution on systems running LibreOffice or Apache OpenOffice might be as easy as tricking users into opening a malicious ODT (OpenDocument) file and …

The problem with vulnerable IoT companion apps

February 7, 2019

There’s no shortage of exploitable security holes in widely used Internet of Things devices, so it shouldn’t come as a surprise that the communication between many …

Most Magento shops get compromised via vulnerable extensions

February 1, 2019

Vulnerable third party extensions (modules) are now the main source of Magento hacks, says security researcher and Magento forensics investigator Willem de Groot. “The …