The vulnerability ‘allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software.’
The vulnerability ‘allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software.’
CVE-2012-1823 is a PHP arbitrary command execution vulnerability uncovered back in May 2012. Despite being discovered and patched a long time ago, cybercriminals have been successfully using it in their operations over the past months. According to Imperva, an exploit for this vulnerability was made public in October 2013. Variations of the exploit have been […]
Ibrahim Raafat, a security researcher from Egypt, has uncovered a vulnerability in Yahoo! Suggestions that could have been exploited by a malicious actor to delete all 365,000 posts and 1,155,000 comments published by users. According to the expert, he found an Insecure Direct Object Reference Vulnerability (IDORV) on Yahoos Suggestions website (suggestions.yahoo.com). The bug could […]
Latest Comments