Select Page

Ideas, Answers, and Perspectives

The Hillstone Blog
August 6, 2018

Vulnerability Notification: Oracle WebLogic Server Activator Insecure Deserialization

[Overview] WebLogic Server is a Java application server platform for developing, integrating, deploying, and managing large distributed Web applications and database applications. Recently, Oracle released an update patch to fix the...
Threat Research

Vulnerability Notification: Asterisk PJSIP Endpoint Presence Disclosure
July 24, 2018 | Hillstone Networks
[Overview] Asterisk is an open source software that implements the Private Branch eXchange (PBX) of telephone, allowing multiple affiliated telephones or user agents to call each...

Vulnerability Notification: Adobe ColdFusion DataServicesCFProxy ROME Framework Insecure Deserialization
July 10, 2018 | Hillstone Networks
[Overview] Adobe ColdFusion is an application development platform. The Flex integration service includes ColdFusion, which allows Flash applications to communicate with the...

Vulnerability Notification: Microsoft Office Graph Chart Out-Of-Bounds Write
June 22, 2018 | Hillstone Networks
[Overview] Microsoft Office is an office software suite based on the Windows operating system, including Word, Excel, etc. Microsoft Graph is a component for document insertion...

Vulnerability Notification: Oracle WebLogic Server deserialization
June 13, 2018 | Hillstone Networks
[Overview] Oracle WebLogic is an enterprise multi-layer application server based on Java architecture. It is commonly used to develop, integrate, deploy, and manage web...