Latest news
VMware has issued a security notice to alert that many VMware products are affected by Log4j2 remote code execution vulnerability CVE-2021-44228
This version is an emergency update of Google Chrome to fix vulnerabilities, of which CVE-2021-4102 have been exploited by hackers in the wild
the details of the vulnerability and the POC of the Microsoft Windows Active Directory domain service privilege escalation vulnerability have been disclosed
the details of Apache Log4j2 remote code execution vulnerability were disclosed, and attackers could use the vulnerability to execute code
Firefox Monitor simply recorded this incident: the leaked Gravatar data only contained emails, names, and usernames.
On December 4, 2021, a security researcher revealed an arbitrary file reading vulnerability in Grafana on the Internet. This is an 0-day vulnerability.
In a report released by Reuters, the news said that nine U.S. State Department employees' iPhones were hacked by NSO spyware.
Malicious KMSPico installers mainly embeds malicious software in the activator and then distributes it through the Internet and software forums.
Zoho ManageEngine ServiceDesk Plus authentication bypass vulnerability was exploited in the wild, the vulnerability number is CVE-2021-44077
Mozilla had issued a risk notice for Mozilla Network Security Services buffer heap overflow, the vulnerability number is CVE-2021-43527
The high-risk security vulnerabilities discovered this time is CVE-2021-39237 and CVE-2021-39238, of which the CVSS score of the latter is as high as 9.3/10