Zero-day vulnerability

Zero-day vulnerability in Internet Explorer using targeted attacks

Symantec has reported the use of targeted attacks by hackers in a new zero-day vulnerability in the browser Internet Explorer . This vulnerability is still open, and the attackers who exploit it could run on the computers of victims of their own malicious code. September 17, Microsoft announced a new zero-day vulnerability in the browser(…)

Adobe Reader zero-day vulnerability

Popular Adobe Reader software was detected with a zero day vulnerability which allows you to execute arbitrary code on the target system. Reported by FireEye, who happened to encounter with an infected PDF-document capable of compromising computers based on Windows. When trying to open a malicious file, it is running two dll-libraries, one of which(…)

Oracle has eliminated 50 vulnerabilities in Java

The manufacturer also re eliminated zero-day vulnerability that is fixed in the past month. Oracle is under pressure from the international information security community has released an update to Java 7 Update 13 vulnerabilities which actively exploited by hackers. Company has removed a total of 50 vulnerabilities, and has released a solution for breach CVE-2013-0422(…)

SCADA-systems of different manufacturers have a zero-day vulnerability

The security company does not intend to disclose vulnerability information providers SCADA-systems, but instead the company will sell it to potential customers. Company ReVuln discovered exploits zero-day vulnerabilities to SCADA-systems developed by Siemens, General Electric, Schneider Electric, ABB / Rockwell, etc. All unpatched vulnerabilities are in the server-side software and can be used remotely by(…)

Zero-day vulnerability in FreeBSD

The developers recommend that users disable the platform data transfer protocol Telnet. On Friday, December 23, a group of developers FreeBSD has published five notices of security to its platform. One of the notices described zero-day vulnerability that exists in telnetd. It has also been released to fix a denial of service vulnerability in DNS server ICS BIND, two vulnerabilities bypass(…)