CODEREDVTA

Vulnerability and Threat Advisories

“Security rules and techniques that helping you stay ahead of cyber threats”

Remote code Execution Vulnerability in WordPress's Elementor Plugin
22/04/2022

Remote Code Execution (RCE) Vulnerability in WordPress’s Elementor Plugin

VTA-00413 – Remote Code Execution (RCE) Vulnerability in WordPress’s Elementor Plugin WordPress’ plugin Elementor, has recently released an important security fix to patch the vulnerability which allows authenticated users to have escalated privileges and achieve administrative rights, which was tracked …

Read More
NGINX Shares Mitigations for Zero-Day Bug Affecting LDAP Implementation
15/04/2022

NGINX Shares Mitigations for Zero-Day Bug Affecting LDAP Implementation

VTA-00412 – NGINX Shares Mitigations for Zero-Day Bug Affecting LDAP Implementation Recently, NGINX has issued mitigations to address security weaknesses in its Lightweight Directory Access Protocol (LDAP) Reference Implementation. The reference implementation which uses LDAP to authenticate users, is impacted only …

Read More
Urgent Google Chrome Update to Patch Type Confusion Vulnerability (CVE-2022-1096)
01/04/2022

Urgent Google Chrome Update to Patch Type Confusion Vulnerability (CVE-2022-1096)

VTA-00411 – Urgent Google Chrome Update to Patch Type Confusion Vulnerability  (CVE-2022-1096) Google has issued update to Chrome 99.0.4844.84 for Windows, Mac, and Linux, to address a high severity vulnerability in its Chrome browser that is being actively exploited in the …

Read More
New Browser-in-the-Browser (BitB) Attack Steal User Credentials
24/03/2022

New Browser-in-the-Browser (BitB) Attack Steals User Credentials

VTA-00410 – New Browser-in-the-Browser (BitB) Attack Steals User Credentials Recently, there is new way to trick targets into coughing up sensitive information. This new type of attack is found  to be using phishing technique that simulates a browser window within …

Read More
High Severity Privilege Escalation of Linux Kernel 'Dirty Pipe' On Major Distros
09/03/2022

High Severity Privilege Escalation of Linux Kernel ‘Dirty Pipe’ On Major Distros

VTA-00409 – High Severity Privilege Escalation of Linux Kernel ‘Dirty Pipe’ On Major Distros Recently, Linux has another high-severity vulnerability that makes it easier for untrusted users to execute codes capable of carrying out a host of malicious actions, including installing …

Read More

Case Study