Security News

Vulnerability-Riddled Drug Pumps Open to Takeover (Threatpost)
2015-05-05 18:34

Hospira's Lifecare PCA3 Drug Infusion pumps are susceptible to multiple remotely exploitable vulnerabilities that could not only brick the device but allow an attacker to run commands and put...

Unpatched Router Vulnerability Could Lead to Code Execution (Threatpost)
2015-04-30 18:07

A critical vulnerability in popular household routers such as D-Link and Trendnet could be exploited by attackers to run arbitrary code on devices.

Critical vulnerability in RealTek SDK breaks routers' security (Help Net Security)
2015-04-30 09:30

A critical vulnerability in version 1.3 of the RealTek software development kit (SDK) has opened hole in D-Link and Trendnet Wi-Fi routers - and possibly many others, as well - which can be exploited ...

WordPress Ecommerce Plugin Vulnerability Details Disclosed (Threatpost)
2015-04-29 18:28

Details on a number of unpatched vulnerabilities in a popular WordPress ecommerce plugin called CartPress were disclosed.

A Year Later, XSS Vulnerability Still Exists in eBay (Threatpost)
2015-04-29 18:27

A potentially dangerous XSS vulnerability has existed in eBay for more than a year and it doesn’t appear the company is a rush to fix the issue.

WordPress Patches Zero-Day Vulnerability (Threatpost)
2015-04-28 17:12

WordPress quickly turned around a patch for a stored cross-site scripting zero-day vulnerability in the CMS' core engine.