-
Does SpaceX use C language? 23rd Sep, 2021
Preface: SpaceX was founded in 2002 by Elon Musk with the goal of reducing space transportation costs to enable the colonization of Mars. Background: Exploring Mars helps scientists understand major changes in climate that can fundamentally change the planet. It also allows us to look for biological features that might reveal whether there was abundant…
-
It is not mystery. The findings address that an original function for CEIP feature is able to misuse (CVE-2021-22005) – 22nd Sep, 2021
Preface: Rapid7 Labs estimates there are over 2,700 vulnerable vCenter servers exposed to the public internet. Background: As of May 1 2020, the Pivotal Telemetry program is governed by VMware’s Customer Experience Improvement Program.Data and continuous feedback loops play an important role in shaping the way Pivotal builds software. VMware analytics service consists of components…
-
Closer look – CVE-2021-25751 (21-09-2021)
Preface: As we know that Kubernetes (K8s) is a container orchestration tool and Docker helps to create a container that is managed by us using Kubernetes. Background: What is subPath in volume mount?Subpath references files or directories that are controlled by the user, not the system. Volumes can be shared by containers that are brought…
-
Security Focus on Microsoft windows CMD Stack Buffer Overflow (19-09-2021)
Preface: Twenty years ago, content filter firewalls were not popular. A quick way to harden the Microsoft Internet Information server is to delete all cmd commands to avoid network attacks. Background: If you would like to run cmd in privileged mode. You have to do the following: type “CMD” you can hit Ctrl+Shift+Enter to open…
-
CVE-2021-22941 – May be it is not related, or else was getting the User Enumeration incident waiting to happen (17-09-2021)
Preface: With storage zones controllers, the ShareFile Software-as-a-Service (SaaS) cloud storage also offers private storage for ShareFile data, which is known as storage zones. What is the difference between Dropbox and ShareFile?The goal of ShareFile is to help your team easily share, sync and store large files from any device without compromising important data. And…
-
IS there any related security matter of session (CVE-2021-37535)?
Preface: Did you check your JMS Security Authorization, fix your JMS application immediately. Background: The basic building blocks of a JMS application are: Administered objects: connection factories and destinations Connections Sessions Message producers Message consumers Messages The JMS Connector Service is an enterprise messaging system that provides a way for business applications to exchange datawithout…
-
Forcedentry vulnerability break through iPhone steel door 13th Sep 2021
Preface: These aren’t objects in the “ object-oriented programming” sense of the word; instead, they are the building blocks on which PDF stands. There are nine types of objects: null, Boolean, integer, real, name, string, array, dictionary, and stream. Background: The Pegasus spy program created by NSO uses a zero-day vulnerability in Apple’s operating system…
-
Unkown backdoor run on TCP 7614, virtual patching is one of the protective control methods (12th Sep, 2021)
Preface: Virtual patching acts as a safety measure against threats that exploit known and unknown vulnerabilities. Virtual patching works by implementing layers of security policies and rules that prevent and intercept an exploit from taking network paths to and from a vulnerability. Background: This is so called Evasion Techniques. One of the first techniques that…
-
Security Focus, CVE-2021-28701 on Citrix Hypervisor (9th Sep, 2021)
Preface: You can use Citrix Hypervisor in an unlicensed state. However, you do not have access to some features. To access Citrix hypervisor is easy, go through XenCenter then input user ID and password. Background: Citrix Hypervisor is a high-performance hypervisor optimized for virtual app and desktop workloads and based on the Xen Project hypervisor.…
-
OpenStack Neutron (CVE-2021-40797) – 8th Sep, 2021
Preface: OpenStack Neutron is an SDN networking project focused on delivering networking-as-a-service (NaaS) in virtual compute environments. Neutron has replaced the original networking application program interface (API), called Quantum, in OpenStack. Background: The Web Server Gateway Interface (WSGI) is a simple calling convention for web servers to forward requests to web applications or frameworks written…