NETGEAR ReadyNAS Storage Vulnerable to Serious Command-Injection Flaw
NETGEAR ReadyNAS’ Frontview front end is vulnerable to a serious command injection flaw that puts all data moving through a network at risk.
Vulnerabilities
Months Later, EAS Equipment Still Vulnerable
Bugs in the Emergency Alert System, including one that can enable an attacker to send out a fake alert, still exist in the software, even after the manufacturers were notified and apparently updated it.
Simple Bug Exposed Verizon Wireless Users’ SMS History
A security researcher discovered a simple vulnerability in Verizon Wireless’s Web-based customer portal that enabled anyone who knows a subscriber’s phone number to download that user’s SMS message history, including the numbers of the people he communicated with.
Dennis Fisher and Mike Mimoso discuss the big stories of the last couple of weeks, including the grassroots effort to audit the TrueCrypt source code, the Apple iMessage security model and Yahoo enabling SSL by default.
The Apache Software Foundation have pushed out a new version of Struts, fixing two issues in the framework that were giving developers difficulties.
Researchers have published a paper that casts doubt on the security robustness of the pseudo random number generators in the Linux kernel.
VMware has released a slew of patches that fix vulnerabilities in a number of its products, including vCenter Server, vCenter Server Appliance, vSphere Update Manager, ESX and ESXi. Some of the flaws can lead to authentication bypass or denial of service on affected products. The most serious vulnerability is a bug in vCenter Server 5.0 and […]
Oracle’s October Critical Patch Update includes Java patches for the first time. Of the 127 updates, 50 patch remotely executable vulnerabilities in Java.
There is a trio of high-risk security vulnerabilities in Google Chrome that have been patched in a new version of the browser released on Tuesday. The vulnerabilities all are use-after-free bugs, and Google paid a total of $5,000 in rewards to researchers who discovered and reported them. Google also said that there were several security […]
D-Link is in the process of developing a patch for a serious security vulnerability in some of its older routers that essentially functions as a backdoor.
