All Vulnerabilities
Adobe Acrobat And Reader Memory Corruption Vulnerability (CVE-2016-6942)
Severity: 
Date Published: 20 Oct 2016
Adobe Acrobat and Reader are prone to an unspecified memory corruption vulnerability. Attackers can exploit the vulnerability to do code corruption, control-flow hijack, or information leak attack.
Adobe Acrobat And Reader Memory Corruption Vulnerability (CVE-2016-6940)
Severity:
Date Published: 20 Oct 2016
Adobe Acrobat and Reader are prone to an unspecified memory corruption vulnerability. Attackers can exploit the vulnerability to do code corruption, control-flow hijack, or information leak attack.
Adobe Acrobat And Reader Heap Overflow Vulnerability (CVE-2016-6939)
Severity:
Date Published: 20 Oct 2016
Adobe Acrobat and Reader are prone to an unspecified heap overflow vulnerability. Attackers can exploit the vulnerability to do code corruption, control-flow hijack, or information leak attack.
Microsoft Office Memory Corruption Vulnerability (CVE-2016-3316)
Severity:
Date Published: 20 Oct 2016
A memory corruption vulnerability exists in Microsoft Office. An attacker who successfully exploited this vulnerability could use a specially crafted file to perform remote code execution in the security context of the current user.
An elevation of privilege vulnerability exists in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) remote protocols when they accept authentication levels that do not protect the RPC channel adequately. An attacker who successfully exploited this vulnerability could gain access to the SAM database.
Microsoft Windows PDF Remote Code Execution Vulnerability (CVE-2016-3203)
Severity:
Date Published: 20 Oct 2016
A remote code execution vulnerability exists in Microsoft Windows PDF. An attacker who successfully exploited this vulnerability could cause arbitrary code to execute in the context of the current user.
Apache Traffic Server HTTP Host Header Handling Heap Based Buffer Overflow Vulner...
Severity: 
Date Published: 20 Oct 2016
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
Ruby On Rails Action View Remote Code Execution Vulnerability (CVE-2016-0752)
Severity:
Date Published: 20 Oct 2016
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
Joomla Core Remote Code Execution Vulnerability (CVE-2015-8562)
Severity:
Date Published: 20 Oct 2016
Joomla is prone to a vulnerability that allow remote attacker to execute the arbitrary code, as application fails to sanitize user-supplied input. An attacker can leverage this issue to obtain sensitive information, modify data or upload web shell.
Microsoft Win32k Elevation Of Privilege Vulnerability (CVE-2016-7211)
Severity:
Date Published: 20 Oct 2016
A use-after-free vulnerability was discovered in Microsoft Windows. Successful exploitation of this issue may allow attackers to execute arbitrary code.
Featured Stories
The Mirage of AI Programming: Hallucinations and Code IntegrityThe adoption of large language models (LLMs) and Generative Pre-trained Transformers (GPTs), such as ChatGPT, by leading firms like Microsoft, Nuance, Mix and Google CCAI Insights, drives the industry towards a series of transformative changes. As the use of these new technologies becomes prevalent, it is important to understand their key behavior, advantages, and the risks they present.Read more
Open RAN: Attack of the xAppsThis article discusses two O-RAN vulnerabilities that attackers can exploit. One vulnerability stems from insufficient access control, and the other arises from faulty message handlingRead more
A Closer Exploration of Residential Proxies and CAPTCHA-Breaking ServicesThis article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services.Read more
How Residential Proxies and CAPTCHA-Solving Services Become Agents of AbuseThis article, the first of a two-part series, provides insights on how abusers and cybercriminals use residential proxies and CAPTCHA-solving services to enable bots, scrapers, and stuffers, and proposes security countermeasures for organizations.Read more