Drupal updated the severity of a remote code execution (RCE) vulnerability to “Highly Critical” after known exploits were discovered.
Cisco’s Talos security group disclosed four vulnerabilities that impact the TP-Link TL-R600VPN router. Several of the discovered bugs could lead to remote code execution.
The Apache Software Foundation has released a security advisory that fixes a vulnerability in Commons FileUpload library in Apache Struts versions 2.3.36 and prior.
A proof-of-concept (POC) has been released for an exploit of a recently patched Microsoft Edge vulnerability.
Microsoft issued the October 2018 Security Updates that include nearly 50 unique vulnerability fixes, 12 of them rated critical.