-
MS exchange Precautions – (13th Apr 2021)
Preface: A named pipe is just a file on the filesystem used for I/O through SMB. Background: Outlook Web App is hosted on the Client Access Server role for Exchange Server and integrated with IIS. An Internet Information Services (IIS) worker process is a Windows process (w3wp.exe) which runs web applications, and is responsible for…
-
RIOT-OS 2021.01 Precautions (CVE-2021-27697,CVE-2021-27698 & CVE-2021-27357) – 13th Apr 2021
Preface: RIOT is a low-memory operating system suitable for IoT devices. It is an open source software released under LGPLv2. Background: RPL (Routing Protocol for Low-Power and Lossy Networks) is a routing protocol for wireless networks with low power consumption and generally susceptible to packet loss. It is a proactive protocol based on distance vectors…
-
CVE-2021-30485 – A technical defect was found in ezxml 0.8.6 (11th Apr, 2021)
Preface: ezXML – XML Parsing C Library version 0.8.5 ezXML is a C library for parsing XML documents inspired by simpleXML for PHP.According to the statistis by W3Techs, PHP is use by 79.2% of all websites primary server-side programming language. Background: In an XML file, there are both tags and text. The tags provide the…
-
CVE-2021-28166 (Eclipse Mosquitto) – When a small hole appears in the dam. You should fix it immediately. 7-Apr-2021
Preface: The two main changes to the CONNACK message between MQTTv3.1.1 and MQTTv5 are the enhanced reason codes and the properties field. Background: MQTT is an OASIS standard messaging protocol for the Internet of Things (IoT). It is designed as an extremely lightweight publish/subscribe messaging transport that is ideal for connecting remote devices with a…
-
If you currently use of SOAP Microservices & Apache CXF, you should be staying alert! 7th APr 2021
Preface: Many industry standards still rely on XML to describe and exchange data between business partners in a way that guarantee interoperability even with legacy systems running on mainframes. SOAP enable developers to create and use APIs based on XML payloads. Background: Apache CXF™ is an open source services framework. CXF helps you build and…
-
VMware Releases Security Update (CVE-2021-21982) – 2021-04-01
Preface: From developing anti-virus till today. The trend is Analyse attackers’ behaviour patterns to detect and conducting defence. Product background: Carbon Black Cloud Workload is a data center security product that protects your workloads running in a virtualized environment. Carbon Black Cloud Workload ensures that security is intrinsic to the virtualization environment by providing a…
-
VMware security advisory on 31st March 2021 (CVE-2021-21975 & CVE-2021-21983). Vendor foreseen attacker will exploit these vulnerability together.
Preface: If attacker dexterous to use Server Side Request Forgery and Arbitrary file write vulnerability. It will boots up their risk impact. Background: Photon OS, a lightweight Linux distribution created and maintained by VMware, is designed specifically to run as a container host and has been optimized for cloud-native applications and cloud platforms, and has…
-
Published: March 31, 2021 – Citrix Releases Security Updates for Hypervisor
Preface: Once upon a time, Citrix Hypervisor was known as XenServer. “Xen” is the name of the hypervisor technology first developed by the University of Cambridge and eventually improved by Citrix. Background: Recommendation 1: It is recommended to use paravirtualized devices instead of emulated devices for virtual machines running I/O intensive applications. Recommendation 2: Persistent…