Several Unix-like operating systems are affected by a potentially serious X.Org vulnerability that can be exploited for privilege escalation and arbitrary code execution. X.Org is a popular open source implementation of the X Windows System (also known as X11, X or X-Windows), the graphical windowing system used by BSD and Linux operating systems. read more ..
Tag : Vulnerabilities
Microsoft Office is impacted by a logical bug that allows an attacker to abuse the “online video” feature in Word to execute malicious code, Cymulate security researchers warn. read more http://feedproxy.google.com/~r/Securityweek/~3/YZpTstm3gXQ/logical-bug-microsoft-words-online-video-allows-code..
Enlarge (credit: Frank Lindecke / Flickr) Several big-name Linux and BSD operating systems are vulnerable to an exploit that gives untrusted users powerful root privileges. The critical flaw in the X.org server—the open-source implementation of the X11 system that helps manage graphics displays—affects OpenBSD, widely considered to be among the most secure OSes. It also ..
SecureAuth Labs security researchers have discovered multiple vulnerabilities in low-level drivers installed by ASRock utilities. read more http://feedproxy.google.com/~r/Securityweek/~3/fkSUrcd2uX4/multiple-vulnerabilities-patched-asro..
Cisco’s WebEx software is affected by a serious vulnerability that can be exploited to execute arbitrary commands with elevated privileges. read more http://feedproxy.google.com/~r/Securityweek/~3/0m2ujJLIVWM/researchers-find-command-injection-flaw-c..
A new zero-day vulnerability in Windows was made public on Twitter by the same researcher who published an exploit for a bug in the Windows Task Scheduler at the end of August. read more http://feedproxy.google.com/~r/Securityweek/~3/jO1fpbSo6BA/exploit-new-windows-zero-day-publish..
After compromising large websites or third-party services they use in order to steal credit card information, the Magecart hackers have now turned to vulnerable Magento extensions. read more http://feedproxy.google.com/~r/Securityweek/~3/O2U9MNrDLGc/magecart-hackers-now-targeting-vulnerable-magento-..
The Department of Defense announced on Wednesday that its “Hack the Pentagon” bug bounty program will run all year long and will target the organization’s high-value assets. read more http://feedproxy.google.com/~r/Securityweek/~3/vBf_-KHJjT0/pentagon-launches-continuous-bug-boun..
ATLANTA — SECURITYWEEK 2018 ICS CYBER SECURITY CONFERENCE — Plaintext passwords crossing the network, outdated operating systems, direct connections to the Internet, and the lack of automated updates for security solutions often put industrial systems at risk of attacks, according to a new report published on Tuesday by industrial cybersecurity firm CyberX. read more http://feedproxy.google.com/~r/Securityweek/~3/S-3dI6rZLsY/plaintext-passwords-often-put-industrial-systems-r..
Cisco and F5 Networks are investigating the possible impact of the recently patched libssh vulnerability on their products, while other vendors have concluded similar investigations. read more http://feedproxy.google.com/~r/Securityweek/~3/f2E8ny_s_Nk/cisco-f5-networks-investigate-libssh-vulnerabil..
