Latest RCE news

November Android Security Update Fixes Critical Bugs, Drops Media Library

Google released to all users and partners its November security bulletin for the Android operating system, with fixes for critical remote code execution (RCE) and privilege escalation vulnerabilities.
- Ionut Ilascu
- November 07, 2018
- 06:51 AM
- 0
Apache Struts Team Urges Users for Library Update to Plug Years-Old Bugs

In an advisory yesterday, the Apache Software Foundation reiterates its recommendation for users of Struts to make sure their installations run a version of the Commons FileUpload library newer than 1.3.2, lest they expose their projects to possible remote code execution attacks.
- Ionut Ilascu
- November 06, 2018
- 05:25 AM
- 0
Security Bug in Icecast Puts Online Radio Stations At Risk

A vulnerability discovered in Icecast streaming media server could be leveraged by an attacker to kill the broadcast of online radio stations that rely on it to reach their audience.
- Ionut Ilascu
- November 05, 2018
- 04:13 AM
- 0
Remote Code Execution Flaws Found in FreeRTOS - Popular OS for Embedded Systems

FreeRTOS, the open-source operating system that powers most of the small microprocessors and microcontrollers in smart homes and critical infrastructure systems has 13 vulnerabilities, a third of them allowing remote code execution.
- Ionut Ilascu
- October 22, 2018
- 04:37 AM
- 2
Microsoft Fix for Windows JET Database Bug Not Perfect, Micropatch Available

Windows JET Database Engine continues to be vulnerable to remote code execution bug after Microsoft released a patch in the October security updates rollout.
- Ionut Ilascu
- October 13, 2018
- 03:04 AM
- 0
PoC Code Available for Microsoft Edge Remote Code Execution Bug

The flurry of security bugs Microsoft addressed with its latest rollout of updates includes a remote code execution vulnerability in Edge web browser. The glitch relies on abusing URI schemes and scripts in Windows that can run with user-defined parameters.
- Ionut Ilascu
- October 11, 2018
- 06:50 PM
- 1
Critical RCE Peekaboo Bug in NVR Surveillance System, PoC Available

A critical vulnerability in software from a global vendor of video surveillance equipment puts at risk the security of video feeds from over 100 camera brands and more than 2,500 camera models.
- Ionut Ilascu
- September 18, 2018
- 11:26 AM
- 0
Critical Flaw Fixed in Packagist, PHP's Largest Package Repository

The maintainers of Packagist, the PHP ecosystem's largest package repository, have fixed a critical vulnerability on their official website that could have allowed an attacker to hijack their service.
- Catalin Cimpanu
- August 29, 2018
- 05:07 AM
- 0
Active Attacks Detected Using Apache Struts Vulnerability CVE-2018-11776

After last week a security researcher revealed a vulnerability in Apache Struts, a piece of very popular enterprise software, active exploitation attempts have started this week.
- Catalin Cimpanu
- August 28, 2018
- 12:39 PM
- 1
Valve Patches Security Bug That Existed in Steam Client for the Past Ten Years

Valve developers have recently patched a severe security flaw that affected all versions of the Steam gaming client released in the past ten years.The vulnerability would have allowed an attacker to execute malicious code on any of Steam's 15 million gaming clients.
- Catalin Cimpanu
- May 31, 2018
- 06:58 AM
- 0