jawad
jawad
PHP2Shell exploit bypasses protections designed to stop remote code execution
Researchers have developed a new exploit that shows how even Address Space Layout Randomization (ASLR) on an x86-64 server cannot stop the PHP2Shell vulnerability. VulnCheck, which made it available to…
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, including some that allow various unauthenticated actions.…
Max-severity GitLab bug allows remote code execution over 12 years of releases
GitLab on Wednesday patched a maximum-severity flaw that could allow unauthenticated attackers to execute arbitrary code on self-managed servers under certain conditions. Affected software releases date back a full 12…
Disgraced Indian cert issuer leaves the cert issuing business
After embarrassing reports revealed weak private keys, one of which was just a single digit, Indian certification authority eMudhra has decided to take the L and get out of the…
PHP2Shell puts dozens of UK government services out of service
The PHP2Shell security fiasco has forced 32 UK government services offline and left another four partially unavailable as Whitehall scrambles to patch the critical vulnerabilities wreaking havoc across the web.…