Select Page

Ideas, Answers, and Perspectives

The Hillstone Blog
July 10, 2018

Vulnerability Notification: Adobe ColdFusion DataServicesCFProxy ROME Framework Insecure Deserialization

[Overview] Adobe ColdFusion is an application development platform. The Flex integration service includes ColdFusion, which allows Flash applications to communicate with the ColdFusion server via Java RMI. Recently, Adobe fixed a...
Threat Research

Vulnerability Notification: Microsoft Office Graph Chart Out-Of-Bounds Write
June 22, 2018 | Hillstone Networks
[Overview] Microsoft Office is an office software suite based on the Windows operating system, including Word, Excel, etc. Microsoft Graph is a component for document insertion...

Vulnerability Notification: Oracle WebLogic Server deserialization
June 13, 2018 | Hillstone Networks
[Overview] Oracle WebLogic is an enterprise multi-layer application server based on Java architecture. It is commonly used to develop, integrate, deploy, and manage web...

Vulnerability Notification: Apache HTTP Server Denial of Service
June 2, 2018 | Hillstone Networks
[Overview] The Apache HTTP server is currently the most popular web server, which supports the use of various runtime loaded modules to extend its functionality. Recently, Apache...

Electron Vulnerability Notification: Electron setAsDefaultProtocolClient Command Injection
May 14, 2018 | Hillstone Networks
[Overview] Electron is an open source framework for developing desktop GUI applications that enables developers to build native programs across MAC, Windows, and Linux using web...