Zoom RCE bug Haunts ! Patch it
A bunch of bugs identified in Zoom that can be exploited to compromise another user over chat by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages. Below are…
ESET Fixes Privilege Escalation Flaw in its Engine
ESET has released patches to address a high severity local privilege escalation vulnerability, tracked CVE-2021-37852, impacting its Windows clients. An attacker can exploit the vulnerability to misuse the AMSI scanning…
CISCO Prime Opened Vulnerable to RCE
A series of vulnerabilities in the web interface of Cisco Prime opened servers to RCE attacks. Cisco Prime is a network management service that provides tools for provisioning, monitoring, optimizing, and…
Box MFA bypass could lead to Account takeover
Box has patched a flaw in its SMS-based two-factor authentication (MFA), just weeks after its temporary one-time password (TOTP)-based MFA was found to have vulnerabilities too. Once known, the vulnerability…
doorLock DoS Vulnerability in Apple HomeKit
Researchers discovered a new persistent DoS vulnerability, dubbed ‘doorLock,’ affecting the Apple HomeKit in iOS 14.7 through 15.2. HomeKit is a software framework by Apple, available in iOS/iPadOS that lets users…
Data Vault Security Flaw Impacts Data Integrity
Researchers has discovered that DataVault encryption software made by ENC Security and used by multiple vendors is affected by a couple of key derivation function issues. An attacker can exploit the flaws…
Zero Days Vulnerabilities in 2021
A zero-day vulnerability refers to a security vulnerability for which no mitigation or patch is available at the time it is disclosed or made public.Existing software patches are unable to…
WD SAN Disk Secure Access Flaw Vulnerable to Password Attacks
Western Digital has released updates for its SanDisk SecureAccess software to fix multiple vulnerabilities that can be exploited to access user data by carrying out brute force and dictionary attacks.…