Author: DEFENDEDGE

A patch in the NextGen Gallery WordPress plugin fixes critical and high-severity cross-site request forgery flaws. Read more

Original release date: February 8, 2021 Mozilla has released security updates addressing a vulnerability affecting Firefox and Firefox ESR. An attacker can take advantage of this vulnerability to take control of an affected system.   CISA encourages users and administrators to review the Mozilla security advisory for Firefox 85.0.1 and Firefox ESR 78.7.1 and apply… Read more

Original release date: February 8, 2021   High Vulnerabilities Primary Vendor — Product Description Published CVSS Score Source & Patch Info accel-ppp — accel-ppp Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server,… Read more

Claroty reports that adversaries, CISOs and researchers have all turned their attention to finding critical security bugs in ICS networks. Read more

An CRSF-to-stored-XSS security bug plagues 50,000 ‘Contact Form 7’ Style users. Read more

Google warns of a zero-day vulnerability in the V8 open-source engine that’s being actively exploited by attackers. Read more

Original release date: February 4, 2021 Cisco has released security updates to address vulnerabilities in Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Cisco Advisories and apply the necessary updates. For updates addressing lower severity vulnerabilities, see… Read more

The vulnerabilities exist in Cisco’s RV160, RV160W, RV260, RV260P, and RV260W VPN routers for small businesses. Read more

A second APT, potentially linked to the Chinese government, could be behind the Supernova malware. Read more

Researchers warn that the Hildegard malware is part of ‘one of the most complicated attacks targeting Kubernetes.’ Read more