Tanzania Computer Emergency Response Team

Microsoft has released 14 security updates to address multiple vulnerabilities in Microsoft Windows.  Exploitation of these vulnerabilities could allow remote code execution or elevation of privileges and information disclosure. Users and administrators are encouraged to review Microsoft Security Bulletins and apply the necessary updates. Click here for more information

Lenovo Service Engine (LSE) Bios Vulnerability has been discovered in Lenovo personal computers and Desktops that could allow an attacker to take control of an affected system. Updates have been realised to address the vulnerability. Users and administrators are encouraged to review the Security advisory released by Lenovo and apply …

The Mozilla Foundation has release security updates to address critical vulnerability in the built-in PDF reader for Firefox and Firefox ESR. The updates address vulnerability that could allow an attacker to read and steal sensitive local files from the victim’s computer. The following updates are available: (a) Firefox 39.0.3 (b) …

WordPress 4.2.4 has been released to address critical cross-site scripting and SQL injection vulnerabilities. Exploitation of this vulnerability could allow a remote attacker to take control of an affected website. Users and administrators are encouraged to review the WordPress security and maintenance release and apply the necessary updates. Click here …

WordPress 4.2.3 has been released to address critical cross-site scripting vulnerability. Exploitation of this vulnerability could allow a remote attacker to take control of an affected website. Users and administrators are encouraged to review the WordPress security and maintenance released and apply the necessary updates. For more information please visit: …