Recently, a critical security vulnerability in Adobe Acrobat Reader was disclosed by the U.S. Cybersecurity and Infrastructure Security Agency (CISA). This security flaw is known as CVE-2023-21608 and has been rated with a CVSS score of 7.8. It is a security vulnerability known as a “Use-after-free bug,” which allows potential attackers to achieve Remote Code …
CISA warns of security vulnerability in Adobe Acrobat Reader Read More »
Attacker can bypass protective measures like WAF or DDoS protection through their own Cloudflare accounts. Stefan Proksch, a security expert from Certitude, an IT consulting company in Vienna, recently discovered vulnerabilities in Cloudflare’s cross-tenant security measures. This could potentially enable attackers to circumvent protection mechanisms configured by Cloud provider customers, such as the Web Application …
Hackers can attack Cloudflare customers through Cloudflare Read More »
In a recent development on the code management platform GitHub, a proof-of-concept exploit for a critical security vulnerability in Microsoft SharePoint has surfaced. This vulnerability, registered as CVE-2023-29357 and having a CVSS rating of 9.8, allows malicious actors to escalate their privileges on vulnerable servers without any authentication or user interaction. Microsoft’s Swift Response: June …
Exploit for critical SharePoint vulnerability has surfaced Read More »
In a recent discovery, it was found that the extremely popular Atlassian Confluence platform has a zero-day vulnerability. This alarming security flaw could potentially allow malicious actors to create administrator accounts on Confluence servers and carry out malicious actions. CVE-2023-22515: A critical privilege escalation vulnerability The vulnerability, now identified as CVE-2023-22515, has been rated by …
Hackers are exploiting a zero-day vulnerability in Atlassian Confluence Read More »
A newly uncovered security vulnerability in Microsoft Office Word has raised concerns regarding the security of this widely used productivity suite. This security flaw has been categorized as a Cross-Site Scripting (XSS) vulnerability, which allows malicious actors to execute arbitrary JavaScript code within a Word document. This XSS vulnerability affects various Office products, including Microsoft …