-
Perhaps you will forget, vulnerability in VMware View Planner (CVE-2021-21978) – 21st March 2021
Preface: The Secure Development Lifecycle – From requirements to design, coding to test, the SDL strives to build security into a product or application at every step in the development process. Background: VMware View Planner is a workload generator that simulates typical user operations such as typing in Microsoft Word, playing a PowerPoint slideshow, reading…
-
CVE-2021-3195 Improper Input Validation of Dumpwallet (19th Mar 2021)
Preface: In 2020, the public doubts that Bitcoin may die. The fact is, his performance is strong. Background: Dumpwallet capable to dump all wallet keys in a human-readable format to a server-side file. When you use dumpwallet, you should expect to see several thousand lines. If you have not imported any scripts, you should have…
-
Highly Evasive Leverages (16the March, 2021)
Preface: There is a registry key in your system that can be set to prevent certain applications from running, including security software. Background: If the software developer creates a buffer and reserves 1024 bytes then tries to copy anything more than 1023 bytes (computers start counting at 0 remember) it will overflow out from the…
-
A validation of the input string will be reduced cyber attack surface on your web application -16th Mar 2021
Synopsis: The package xmlhttprequest before 1.7.0 had vulnerability occurs. The CVE-2020-28502 was published on 5th March, 2021. Background: node-XMLHttpRequest is a wrapper for the built-in http client to emulate the browser XMLHttpRequest object.This can be used with JS designed for browsers to improve reuse of code and allow the use of existing libraries. Vulnerability details:…
-
F5 network products cover a wide range. When vulnerability occur, they should be remedied as soon as possible. (CVE-2021-22991 – 12th Mar 2021)
Preface: F5 network products are commonly deployed in data center and on-premises Internet facing infrastructure. Background: F5 Network’s Traffic Management Operating System (TMOS) is not a separate operating system. It is the software foundation for all of F5’s network or traffic (not data) products including both physical or virtual platform. TMM is the core component…
-
Message from F5 Network – To Whom it may concern (11-03-2021)
Preface: From technical point of view, attacker cast the returned void* to an int* and start using it. It is one of the modern cyber attack technique. Background: Attacker would have to overwrite the return address to an address such as ”…………….“ where there would be a “JMP RSP” instruction, and continue with their shellcode…
-
SAP Security Patch Day – March 2021: Don’t forget check your business client software.
Preface: In SAP Business Client history, rare to offer a Chromium web browser control based on CefSharp (CEF – Open Source Version of Google Chrome) as an alternative rendering engine to Microsoft IE. In 2018, the dream come true happened. SAP business clinet software technical background: If local client web browser not work, SAP client…
-
One step closer – Remedy of SaltStack design weakness (8th Mar, 2021)
Preface: SaltStack was acquired by VMware on October 13, 2020. All SaltStack commercial information can be found on VMware.com. For the Salt open source project, visit saltproject.io Background: SaltStack is a configuration management and orchestration tool. It uses a central repository to configure new servers and other IT infrastructure in Cloud computing environment. It can…
-
Sometimes internal threats are more dangerous than external anonymous threats! (7th March 2021)
Preface: In computing, ioctl (an abbreviation of input/output control) is a system call for device-specific input/output operations and other operations which cannot be expressed by regular system calls. Background: The ioctl design for public is considered bad for numerous reasons. And therefore some people suggest replace ioctl with Netlink. Netlink is a very good way…
-
The vulnerability found in the Ethernet Frame Decoder component of Snort. It will impacts all versions of the popular open source intrusion prevention and intrusion detection system (IPS/IDS) prior to 2.9.17, said Cisco. (3-3-2021)
Preface: Snort is an open-source, free and lightweight network intrusion detection.The Snort Subscriber Ruleset is developed, tested, and approved by Cisco Talos. Background: Sourcefire, Inc was a technology company that developed network security hardware and software. The company’s Firepower network security appliances were based on Snort. Snort has three primary uses: As a packet sniffer…