Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers

We, along with the security industry and our partners, continue to investigate the extent of the Solorigate attack. While investigations are underway, we want to provide the defender community with intelligence to understand the scope, impact, remediation guidance, and product detections and...

The vulnerability in the IBM SDK Java Technology Edition development tools relates to the use of an unreliable search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IBM SDK Java Technology Edition development tools is related to the use of an unreliable search path. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

How to Increase Your Security Posture with Fewer Resources

With the number of COVID-19 cases increasing, another round of attacks is looming over schools and universities as they move into holiday break and prepare for the spring semester. According to a recent article the Wall Street Journal, there have been “nearly three dozen ransomware attacks agains...

Moderate: Red Hat Security Advisory: java-1.7.1-ibm security update

An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

What is Geocoding? — How to Find Coordinates of An Address

How can your app hook into a geocoding service that offers forward and reverse geocoding and an auto-completion facility? Geocoding turns a location name or address into geocoordinates. The service gets used by thousands of applications like Uber and Grubhub to track and plot their map data. Yet,...

Eclipse Che Cross-Site Request Forgery Vulnerability (CNVD-2021-14164)

Eclipse Che is the Eclipse Foundation's set of Java-based open source online integrated development environment IDE. A cross-site request forgery vulnerability exists in Eclipse Che versions prior to 7.14.0. No detailed vulnerability details are provided at this time...

Pegasystem Pega Platform Cross-Site Scripting Vulnerability (CNVD-2021-28267)

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. A cross-site scripting vulnerability...

Virtuozzo 7 : java-1.7.0-openjdk / etc (VZLSA-2019-1839)

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

EulerOS 2.0 SP5 : pcp (EulerOS-SA-2020-2557)

According to the versions of the pcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE...

Zhengzhou Weikou Network Technology Co., Ltd. eEnterprise CMS has a file upload vulnerability

EECO CMS is a marketing enterprise website system based on SEO-friendly development in China. Zhengzhou Weikou Network Technology Co., Ltd. eEnterprise CMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...

Apple's App 'Privacy Labels' Are Here—and They're a Big Step Forward

It remains unclear how effective the warnings will be, but the attempt alone is a promising development...

Logic Flaw Vulnerability in WebView JsBridge

WebView is the term that refers to the web page view. It can be embedded in the mobile terminal to realize the front-end of the hybrid development, most of the hybrid development framework is based on the WebView mode for secondary development. WebView JsBridge has a logic flaw vulnerability that...

CVE-2020-17148

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...

CVE-2020-17148

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...

Microsoft Azure DevOps Server Input Validation Error Vulnerability

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. No details of the...

Virtuozzo 7 : java-1.8.0-openjdk / etc (VZLSA-2019-3128)

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2020-17148

CVE-2020-17148 affects the Visual Studio Code Remote Development Extension (SSH-based remote access). The root cause is a defect in the SSH editor’s source code handling that enables remote code execution. The vulnerability enables an attacker to execute arbitrary code on the vulnerable host with...

CVE-2020-17148 Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

...

SUSE SLED15 / SLES15 Security Update : libproxy (SUSE-SU-2020:2901-1)

This update for libproxy fixes the following issues : CVE-2020-25219: Rewrote url::recvline to be nonrecursive bsc1176410. CVE-2020-26154: Fixed a buffer overflow when PAC is enabled bsc1177143. Note that Tenable Network Security has extracted the preceding description block directly from the SUS...