Thursday, August 6, 2020
Office Vulnerability

Patched MS Office RCE Vulnerability Again Abused Windows Installer and Delivering a Keylogger

A Patched remote code execution Microsoft Office Vulnerability ( CVE-2017-11882) abusing again and using it for spreading a variety of  Malware such as  FAREIT, Ursnif and a Keylogger Loki info stealer that is used for stealing Crypto wallet password. In this case, some...
Zero-day Vulnerability

Beware!! New Zero-day Vulnerability Found in Adobe Flash Player – Still No Patches Available

Adobe Flash Player now suffering from brand New Zero-day vulnerability with high severity rate and researchers believes that it cause a Severe impact on ActiveX Support browsers which leads to compromise the Windows PC. Zero-day vulnerabilities are referred to attacks...
Lenovo Fingerprint Manager

Attackers Can Bypass Lenovo Fingerprint Manager through a Hard-coded Password

Lenovo released a security update for critical vulnerability with Lenovo Fingerprint Manager Pro that impacts dozens of ThinkPad, ThinkCentre and ThinkStation Workstations that are running Windows 7, 8 and the 8.1 operating systems. It is a utility for user authentication...
BitTorrent

Critical Flaw in Popular BitTorrent Transmission Client Leads to an Attacker Perform Remote Hack...

A critical flaw discovered in BitTorrent Transmission client app that allows an attacker can remotely control the victims PC by using a method called DNS Rebinding which leads to Transmission control can remotely access by an attacker via a...
macOS

macOS High Sierra’s App Store System Can be Unlocked by Any Password

New bug discovered in macOS High Sierra allows unlocking the App Store System Preferences by any password. App Store System Preferences accept any password when system logged in with local admin Privilege. This could be very dangerous if anyone already has your...
ethicalhackersacademy