-
Security Focus – ESXi OpenSLP RCE vulnerability (CVE-2020-3992)
Preface: If you like open source application. You should also like the bug he given. OpenSLP has been ported to a wide variety of systems. For example: Linux (32/64),Windows (32/64),SCO Unix,FreeBSD,Solaris,Tru64,Mac OS X,Darwin,… OpenSLP eliminates the need for users to know the names of network hosts. With OpenSLP, the users need only know the description…
-
Does it whether a myth or it is true? Quantum entanglement in Pyramid internal compartment.
Preface: The pyramid of Egypt. It is a mystery to mankind on the Earth. What is it use for? According to scientists evaluation by far. It is hard to believed that the ancient mankind have such knowledge and capabilities to build this facility. This article was used current known materials. Furthermore, it includes my imagination…
-
CVE-2020-16951 – SharePoint users staying alert! (17th Oct 2020)
Preface: Perhaps it is a design limitation. SharePoint did not check the source markup of an application package which provides an opportunity to attacker. However when you read the prerequisite requirement of the proof of concept. You will feel that it might have difficulties to exploit this vulnerability. However it found a way to trigger…
-
CVE-2020-13943 – Apache Tomcat HTTP/2 DoS (16th Oct 2020)
Preface: Slow HTTP attacks are denial-of-service (DoS) attacks. It was happened near decade ago. Such vulnerability let the people aware application security. Background: Why do we need HTTP/2? HTTP/2 allows the client to synchronously send multiple requests to the server through the same TCP connection, and the server can also use the same TCP connection…
-
Microsoft Addresses Windows TCP/IP RCE/DoS Vulnerability – US Homeland security urge for public attention. (14th Oct 2020)
Preface: Before the release of IP version 6, we had a good impression of its features. Technical background: The official technical article provides the definition of IPv6 RDNS option address length (Details refer to attached diagram – point 3). Potential Impact: If an even length value is provided, the attacker intentionally causes the Windows TCP/IP…
-
Homograph Attack (Puny-code) – CVE-2020-25779
Preface: In order to avoid malware attack, DNS is the 1st door for quarantine. This step not difficult, see whether the domain name which calling will be included in the black list. What is Punycode?Unicode that converts words that cannot be written in ASCII. Background: There are two different scenarios for the cyber threat actor…
-
CVE-2020-26947 – Monero-wallet-gui design weakness (12th Oct 2020)
Preface: Monero price US$132.36 today – (12th Oct 2020). Monero (XMR) stands at the top of the list. This cryptocurrency’s popularity has been on the rise, primarily due to its ability to help anonymize users. Monero transactions are much more difficult to trace because they use ring signatures and stealth addresses. Vulnerability details: monero-wallet-gui in…
-
Official alert – APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elections Organizations (9th Oct 2020)
Preface: Zero-day attacks don’t have signatures; no one in the security community has analyzed the exploited vulnerability yet. It was probably only discovered after the victim reported it. And therefore we should setup a comprehensive vulnerability management program. Risk management – In reality, it’s not easy applying every patch as soon as it comes out.…
-
CVE-2020-12505 & CVE-2020-12506 CODESYS impacting WAGO, not sure who is the next victim? – 7th Oct 2020
Preface: CODESYS is the leading manufacturer-independent IEC 61131-3 automation software for engineering control systems.However the design weakness jeopardize the Industrial world. Highlights: According to the CVE announcement on 30th September 2020. A series of WAGO PLC-ETHERNET fieldbus controllers are vulnerable to cyber attack. Vulnerability details: The authentication can be disabled for the port 11740 when…
-
Security Focus About Samsung mobile phone vulnerabilities. (NVD release date: October 6, 2020)
Preface: So far, it is difficult to detect the PendingIntent vulnerability from a tool. Background: “PendingIntends” insecure usage can lead to serverBY exploiting vulnerable but benign applications that are in securely using PendingIntents. A malicious application without any permissions can perform many critical operations, such as sending text messages (SMS) to a premium number. Known…