Security News

Adobe Patches Critical Command Injection, Path Traversal Flaws in ColdFusion
2019-09-24 18:32

Updates released by Adobe on Tuesday for its ColdFusion web application development platform address three vulnerabilities, including two that have been classified “critical.” read more

Critical Flaws in Sierra Wireless 5G Gateway Allow RCE, Command Injection
2019-04-26 16:12

The wireless gateways are used in PoS, industrial IoT and distributed enterprise settings.

Verizon Router Command Injection Flaw Impacts Millions
2019-04-09 13:00

A high-severity flaw in the Verizon Fios Quantum Gateway, used in millions of U.S. homes, could allow for command injection.

What a crane in the ass! Bug leaves construction machinery vulnerable to evil command injection
2018-10-25 18:52

Builders warned over Telecrane remote controller security vuln US-CERT is advising some customers of Telecrane construction cranes to patch their control systems – following the disclosure of a...

Researchers Find Command Injection Flaw in Cisco WebEx
2018-10-25 14:23

Cisco’s WebEx software is affected by a serious vulnerability that can be exploited to execute arbitrary commands with elevated privileges. read more

Now that's a fortune cookie! Facebook splats $5k command-injection bug in one of its servers
2018-08-24 21:51

Find flaw, report flaw, fix flaw, get paid. Bish, bash, bosh Facebook has patched a remote-code execution flaw discovered in one of its servers.…

Crestron Patches Command Injection Flaw in DGE-100 Controller
2018-06-12 12:01

Crestron recently addressed a command injection vulnerability in the console service preinstalled on the Digital Graphics Engine 100 (DGE-100) and other hardware controllers made by the company. read more

Critical Command Injection Flaw Patched in Red Hat Linux
2018-05-16 13:31

A critical vulnerability in the DHCP client in Red Hat Enterprise Linux could allow an attacker to execute arbitrary commands on impacted systems. read more

Red Hat Linux DHCP Client Found Vulnerable to Command Injection Attacks
2018-05-15 20:48

A Google security researcher has discovered a critical remote command injection vulnerability in the DHCP client implementation of Red Hat Linux and its derivatives like Fedora operating system....

Solar Power Firm Patches Meters Vulnerable to Command Injection Attacks (Threatpost)
2016-12-08 13:30

Locus Energy has patched 100,000 of its residential and commercial power meters that were vulnerable to command injection attacks and code execution.