Vulnerability Audit Reports

Firefox 95 & ESR 91.4

Firefox 95 and ESR 91.4 got released, you can find de details and the report here.

vCenter vSphere Web Client Vulnerabilities

Check out all the details of two new vulnerabilities in the vCenter vSphere web client along with a report to audit your environment in our vCenter vSphere web client vulnerability blog post.

Chrome 96 Audit

Chrome 96 got released yesterday. The audit is live now so you can report on the update progress.

Linux TIPC Module Contains Critical Vulnerability

A new vulnerability in the Linux Kernel TIPC module has been disclosed affecting all Linux distributions with a Kernel version lower than 5.15. The vulnerability can be exploited both locally and remo...

Firefox 94 & ESR 91.3

Firefox released version 94 and upgraded the ESR release to version 91, both contain multiple vulnerability fixes. Grab the Firefox report here.

WinRAR 5.70

Hi all, a new vulnerability has been found in older versions of WinRAR currently affecting versions 5.70 and older. However, it has only been fixed in a very recent version 6.02. You can read more abo...

Chrome 95 Audit

Google fixed a list of vulnerabilities in Chrome 95, so it's worth checking your assets to see if they have all been updated. You can find the Chrome 95 audit here.

Chrome Zero Day 94

I have updated a chrome report to find all the devices not currently running v 94.0.4606.61 which is the latest release in which the vulnerability CVE-2021-37973Select Top 1000000 tblAssets.AssetID, ...

VMware vCenter Server File Upload Vulnerability

VMware released a new security advisory with 19 vulnerabilities including a critical file upload vulnerability.You can read more about the vulnerabilities in the VMware vCenter Vulnerability blog post...

Apple “FORCEDENTRY” Zero-Day Vulnerability

Two new vulnerabilities were fixed in the latest MacOS and iOS versions, you can find a report to check your devices and read more about it in the ForcedEntry Vulnerability Audit.

Firefox 92

Firefox 92 and ESR 78.14 have been released with minor features and security fixed. you can find the Firefox report here.

MacOS IOMobileFrameBuffer 0-day Report

Hi all,Apple released a new patch for CVE-2021-30807 which is actively being exploited. You MacOS should be up to 11.5.1, you can use the MacOS IOMobileFrameBuffer report to check.

PetitPotam

I've created a blog detailing this new vulnerability and how to mitigate it which you can find in the PetitPotam NTLM Relay Attack Allows Domain Takeover blogWhile there isn't a really specialized rep...

Firefox 90

Hi all,Firefox 90 and the corresponding ESR released were released last Tuesday. Here is the Firefox 90 report.

Print Spooler Service Vulnerability

Another vulnerability has been found in the Print Spooler Service, CVE-2021-34481I've created another Print Spooler service report and updated the original blog post.Time to disable the service again!...

Kaseya VSA REvil Ransomware Attack

If you happen to use Kaseya, it is advised to shut down the services completely as their are being used to deploy REvil Ransomware.You can find a report to detect any machine running a Kaseya Service ...

PrintNightmare 0-day vulnerability

Hi all,A 0-day vulnerability has been accidentally leaked by Microsoft which affects the Print Spooler service. IT can lead to RCE and a domain takeover so it is advised to disable the service on all ...

Dell SupportAssist BIOSConnect Vulnerability

Dell released a new advisory regarding a vulnerability in their BIOSConnect feature. This feature is embedded in their BIOS and required a manual bios update to fix. Removing SupportAssist will not fi...

Blog Articles