-
Can it be remedied or is it a enigma? – JAN 2020
Preface: User Account Control (UAC) is a fundamental component of Microsoft’s overall security vision. UAC helps mitigate the impact of malware. Synopsis: UAC Bypass Using eventvwr.exe was exploited by malware in 2017. Microsoft fixes Eventvwr.exe UAC Bypass Exploit in Windows 10 Creators Update. In Windows 10 Creators Update preview build 15007, Microsoft seems to have…
-
FusionAuth 1.10 Remote Command Execution – JAN 2020
Preface: The biggest differentiator between CIAM and regular (internal) IAM is that in CIAM the consumers of the service manage their own accounts and profile data. Background: FusionAuth provides all of the features you need without the need to code plugins or purchase an enterprise license. It also capable for SaaS architecture provides maximum flexibility…
-
Are there other similarly vulnerability component like ws2ifsl.sys in Windows?
Preface: You found an error in somewhere, sometimes will be expanded your idea of thinking. Synopsis: Ws2ifsl.sys is found in the C:\Windows\System32\drivers directory. In many cases, a driver creates a symbolic link and its name can be used as a file name for CreateFileA, but this is not the case with ws2ifsl. It only calls nt!IoCreateDevicewith the…
-
CVE-2020-2696 Local privilege escalation via CDE dtsession – JAN 2020
Technical Background: How to manages a CDE session? The dtsession command provides session management functionality, compliant with ICCCM 1.1, during a user session, from login to logout. It starts a window manager and allows users to save a session, restore a session, lock a session, start screen savers, and allocate colors for desktop-compatible clients. Vulnerability…
-
NewsOne design weakness – Arbitrary File Upload (18th Jan 2020)
Preface: Arbitrary File Upload but require regular user sign in. Perhaps it lose the access control! Product description: NewsOne is a web based application and fully responsive news & magazine script. Anyone can start your own media/press website with just few clicks without any codding knowledge. Vulnerability details: Auth as a regular user. Go to…
-
MS CryptoAPI spoofing flaw – 15th Jan 2020
Preface: We are all scared of Ransomware! Background: crypt32.dll is a type of DLL file, with extension of .dll. It is associated with Crypto API32 and is used to run Crypto API32 based applications. Certain sophisticated video games and software applications use crypt32.dll to get access to certain API functionality, as provided by Windows. Vulnerability…
-
Return to basis – access control (CVE-2020-3941) – Jan 2020
Preface: A race condition allows an attacker to access a shared resource, which can lead to an attack by other participants using the resource. Background: VMware Tools is a set of services and modules that enable several features in VMware products for better management of, and seamless user interactions with, guests operating systems. Vulnerability details:…
-
Path traversal attack poses a major risk to web application security. Do not contempt! Jan 2020.
Technical background: A layer 7 load-balancer takes routing decision based on IPs, TCP or UDP ports or any information it can get from the application protocol (mainly HTTP). It is a Linux operating system based of machine. HTTP and HTTPS are the predominant Layer 7 protocol for website traffic on the Internet. A path traversal…
-
CVE-2020-1603 vulnerability filed by Juniper, as a matter of fact, it includes all the routing product who make use of linux base OS – 12th Jan 2020
Preface: kdump is a feature of the Linux kernel that creates crash dumps in the event of a kernel crash. When triggered, kdump exports a memory image (also known as vmcore) that can be analyzed for the purposes of debugging and determining the cause of a crash. Vulnerability details: Improper handling of specific IPv6 packets…
-
is it a scenario replay of cve-2019-15975 & cve-2019-15976?
Preface: REST APIs are stateless. Stateful APIs do not adhere to the REST architectural style. Background: SOAP is a protocol, and REST is an architectural style. A REST API can actually utilize the SOAP protocol, just like it can use HTTP. The Cisco Fabric Automation REST APIs for third party applications enables you to programmatically…