by

January 19, 2018

Vulnerability Notification: Oracle WebLogic Server XmlAdapter Deserialization

[Overview] Oracle WebLogic Server is an enterprise multi-tiered Java application service, commonly used as a large enterprise web application platform. [Vulnerability Details] This vulnerability is exploited due to insufficient validation of serialized XML data by WorkContextXmlInputAdapter. An unauthenticated attacker could exploit this vulnerability by sending carefully crafted HTTP XML requests. Exploiting this vulnerability could result…
More
by

January 7, 2018

Statement on Vulnerability: Hillstone Networks does not use Intel Processors in its NGFW

At beginning of 2018, a CPU vulnerability news shocking the whole security industry. According to the Register, a fundamental design flaw in Intel’s processor chips has forced a significant redesign of the Linux and Windows kernels to defang the chip-level security bug. The bug is present in modern Intel processors produced in the past decade….
More