vulnerability

15,435 vulnerabilities across 3,870 applications were recorded in 2014

March 25, 2015

In 2014, 15,435 vulnerabilities were discovered according to data from Secunia Research. The vulnerabilities are spread across 3,870 applications published by 500 different …

Old Adobe Flex SDK bug still threatens users of many high-profile sites

March 24, 2015

An old vulnerability affecting old releases of the Adobe Flex SDK compiler can be exploited to compromise user data of visitors to many popular sites, including three of most …

Flaw in Hilton Honors website left all customer accounts wide open

March 23, 2015

The discovery of a vulnerability in the Hilton HHonors website that could lead to account hijacking and information theft has put a temporary stop to Hilton Hotels & …

Cisco Small Business IP phones vulnerable to eavesdropping

March 23, 2015

Cisco has confirmed the existence of a flaw affecting its Small Business SPA 300 and 500 series IP phones that can be exploited by attackers to listen to the audio stream of …

WordPress plugin used by millions sports critical site-hijacking flaw

March 20, 2015

Another popular Yoast WordPress plugin has been found sporting a critical vulnerability that can be exploited by attackers to take over control of the site. A week ago it was …

Pinterest swaps T-shirts for money rewards in bug bounty program

March 19, 2015

After having migrated their online properties to HTTPS and having sorted out the main problems that arose from the move, Pinterest is ready to pay researchers for information …

Many Android and iOS apps still vulnerable to FREAK attacks

March 18, 2015

Your browser may no longer be vulnerable to FREAK attacks, but what about the mobile apps you use? According to FireEye researchers, who have tested the most popular apps both …

Search for vulnerable servers unearths weak, thousands-times repeated RSA keys

March 17, 2015

A group of researchers from the Information Security Group from Royal Holloway, University of London, wanted to see how many TLS servers still supported the weak, export-grade …

D-Link patches critical flaws in wireless range extender, Wi-Fi cameras firmware

March 17, 2015

D-Link has released new firmware for its DAP-1320 wireless range extender and the DCS-93xL family of Wi-Fi cameras in order to patch two critical vulnerabilities that can lead …

Critical hole in popular WordPress SEO plugin allows SQLi, site hijacking

March 13, 2015

Another highly popular WordPress plugin has been found sporting a cross-site request forgery flaw that can be exploited to mount a blind SQL injection attack, and could also …

Huge IT Slider WordPress plugin opens SQL injection hole

March 12, 2015

The 50,000+ active users of the Huge IT Slider WordPress plugin are advised to update to the latest version, as it closes a vulnerability that can be exploited by website …

Microsoft patches flaw exploited by Stuxnet – again

March 11, 2015

Among the vulnerabilities patched by Microsoft in this month’s Patch Tuesday is one that was supposedly patched back in 2010. The Windows Shell Shortcut Icon Loading …