-
First step to fix CVE-2022-26495 (nbd-server)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: A…
-
CVE-2022-26490 – Do you care about NFC attacks (6th Mar 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: The…
-
About CVE-2022-26129 – buffer overflow encounter on FRR routing protocol suite (Linux and Unix platforms). 2nd Mar 2022
Preface: The reason why do I concerns this open source routing module? Because I predicted that vendors might used this routing module in their products. A well know idea is that routing device will select Linux system as a based OS. Background: FRRouting (FRR) is a free and open source Internet routing protocol suite for…
-
CVE-2021-3772 Not Yet Published, vulnerability found on Linux SCTP stack. Last Modified on: 2nd Mar 2022
Preface: SCTP is used mostly in the telecom area. Traditionally, telecom switches use SS7 (Signaling System No. 7) to interconnect different entities in the telecom network.From technical point of view, IP network is open and not reliable. This is why SCTP was developed. SCTP design objective: Emulate the advantages of the SS7 network accumulated over…
-
FortiAnalyzer & FortiManager – bypass of client-side password change policy enforcement (1st Mar 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: FortiAnalyzer…
-
CVE-2022-26181 Dropbox Lepton design weakness (1st Mar 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: Dropbox…
-
The injustice invasion – Destructive Malware (28th Feb 2022)
Preface: No matter what your reasons are, children are victims! Human nature: Human desires are infinite. We may meet some of our needs, but new ones will soon emerge. Thus, scarcity explains the relationship between having unlimited demand and the problems within it. Security Focus: The malware, known as WhisperGate, has two stages that corrupts…
-
CVE-2022-25809 – Alexa versus Alexa (AvA) attack (24th Feb 2022)
Preface: Perhaps the risk of this vulnerability is not high. However, if attackers exploit specific design weaknesses. It’s hard to say if Lamda can’t direct the attack to the backend service cloud. Background: Alexa is able to play music, provide information, deliver news and sports scores, tell you the weather, control your smart home and…
-
CVE-2022-25335 – About RigoBlock Dragos design weakness (23rd Feb 2022)
Preface: Blockchain protocols are regulations and guidelines followed to achieve its decentralized and distributed nature, to ensure secure transactions, and more. There are three basic types of blockchain: public blockchain, consortium blockchain and private blockchain. Background: RigoBlock is a blockchain protocol that makes it possible for anyone to set up and run a digital token…
-
CVE-2022-23635 (Istio): Unauthenticated control plane denial of service attack.(22nd Feb 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: Istio makes…