Archive

VMware Patches Critical Flaw That Allows Guest Escape

A critical flaw in VMware Fusion and Workstation could allow an attacker to run arbitrary code on the host from the guest.

Drupal Patches Arbitrary File Upload Flaw

Drupal has released fixes for a file-upload flaw that could lead to remote code execution.

Odd Bug Haunts Exim Mail Agent

The Exim MTA used in many Linux distributions contains a vulnerability that is trivially exploitable locally and can be exploited remotely in some cases.

19-Year-Old Bug Haunts WinRAR

A bug that can grant arbitrary code execution has been lurking in the WinRAR compression utility since 2000.

Researchers Uncover Serious Flaws in Access Management System

Tenable Security researchers have found a series of flaws in the PremiSys access management system that can allow admin access to the application.