Select Page

Ideas, Answers, and Perspectives

The Hillstone Blog
September 5, 2018

Vulnerability Notification: Mining Trojans

[Overview] With the rise of virtual currency, a new type of attack – mining Trojans quietly prevailed. Different from the ransomware encrypting user key data and virus Trojan destructing business system, the mining Trojan has no...
Threat Research

Vulnerability Notification: Jenkins CI Server getOrCreate Policy Bypass
August 22, 2018 | Hillstone Networks
[Overview] Jenkins is an open source, continuous integration and delivery application based on Java development that runs in a Servlet container. Jenkins allows developers to...

Vulnerability Notification: Oracle WebLogic Server Activator Insecure Deserialization
August 6, 2018 | Hillstone Networks
[Overview] WebLogic Server is a Java application server platform for developing, integrating, deploying, and managing large distributed Web applications and database...

Vulnerability Notification: Asterisk PJSIP Endpoint Presence Disclosure
July 24, 2018 | Hillstone Networks
[Overview] Asterisk is an open source software that implements the Private Branch eXchange (PBX) of telephone, allowing multiple affiliated telephones or user agents to call each...

Vulnerability Notification: Adobe ColdFusion DataServicesCFProxy ROME Framework Insecure Deserialization
July 10, 2018 | Hillstone Networks
[Overview] Adobe ColdFusion is an application development platform. The Flex integration service includes ColdFusion, which allows Flash applications to communicate with the...