-
CVE-2020-24231 – Are you using SymmetricDS for Database Replication on your Docker or cloud environment?
Preface: Cutting-edge technology companies like open source software. Big data analytics companies may need to pay attention. Observation: According to our observation for advanced technology development firm. No matter they are small size or it is a enterprise firm. They do not mind to use the opensource software application. From business point of view, since…
-
Trend Micro Antivirus for Mac Symbolic Link Privilege Escalation Vulnerability (CVE-2020-25776) 5th Oct 2020
Preface: On a Linux system, chmod never changes the permissions of symbolic links; the chmod system call cannot change their permissions. This is not a problem since the permissions of symbolic links are never used. However, for each symbolic link listed on the command line, chmod changes the permissions of the pointed-to file. VULNERABILITY DETAILS:…
-
Ransomware attacks are raging recent. The victim firm including famous watch manufacture, Bank, Health Services, etc. (30th Sep 2020)
Background: Cyber attack commonly based on vulnerability and user negligence. Ransomware also use the same concept. An example of ransomware today: Conti and Ryuk code is similar. Conti uses a similar ransomware note template to Ryuk and that it appeared to be deploying the same TrickBot infrastructure.When the attack campaigns send unsolicited emails that it…
-
Aveva Edna Enterprise Data Historian Vulnerabilities (CVE-2020-13508,CVE-2020-13505,CVE-2020-13503,CVE-2020-13501,CVE-2020-13500,CVE-2020-13499 & CVE-2020-13507) – Sep 2020
Preface: AVEVA has reached agreement to acquire OSIsoft, a pioneer and global leader in real-time industrial operational data software and services. Background: Under normal circumstance, authorized user can navigate to the ASMX file through your browser. So, you can fill in the form with the parameters and post to the DB. If attacker finds the…
-
Boeing, U.S. regulator made series of errors ahead of 737 Max crashes: congressional report (SeP 2020)
Preface: From logical point of view, if input only relies on a standalone source (sensor). The integrity of the result all relies on the total amount of variable factors. Perhaps sensor install on airplane is a IoT device. So it lure my interest. Background: Traditionally the older (NG) 737 variants did not have fly-by-wire technology,…
-
CVE-2020-13991 JerryScript 2.2.0 vm/opcodes.c privilege escalation (25th Sep 2020)
Preface: JerryScript is the lightweight JavaScript engine intended to run on a very constrained devices such as microcontrollers. Background: In traditional programming environment.The source code is passed through a program called a compiler, which translates it into bytecode that the machine understands and can execute. Internet of Things devices have serious constraints on CPU performance…
-
Sourcecodester Seat Reservation System Version 1.0 vulnerabilities
Preface: It is common for application developers to use open source as a reference. Synopsis: If you are consider or has been used the free source code to develop the seat-reservation-system.You should stay alert for vulnerabilities in this software product. Vulnerability details: Seat Reservation System 1.0 Unauthenticated SQL Injection (CVE-2020-25762)Seat Reservation System version 1.0 suffers…
-
APT developing new evasion technique to conducting cyber attack – 23rd Sep 2020
Preface: The APT organization provides a hard-to-detect malware to attack other hostile campus. Synopsis: The evasion technique found recently by security expert team is that APT 29 exploit the design weakness of detection machanism. They do a re-engineering to covert a zip file to JPEG.“This technique works because JPEG files are parsed from the beginning…
-
Samba 4.0 and later drag in netlogon protocol vulnerability (CVE-2020-1472). As a matter of facts, the flaw not created by Microsoft – 22nd Sep 2020
Preface: CFB8 was created to have good error propagation properties over a noisy channel. It is well known that it is not fast; it is actually 16 times as slow, as it requires a block encrypt for each byte. Details: CVE-2020-1472, also known as “Zerologon,” was given a “critical” security rating from Microsoft. It has…
-
An issue was discovered in the sized-chucks crate through 0.6.2 for Rust. Software developer should be careful when make use of paypal-rs. (19-09-2020)
Preface: Companies large and small are using Rust in production all over the world, including Mozilla, Dropbox, npm, Postmates, Braintree and others. Vulnerability details: An issue was discovered in the sized-chucks crate through 0.6.2 for Rust CVE-2020-25791…CVE-2020-25796.Chunk:– Array size is not checked when constructed with unit() and pair()– Array size is not checked when constructed…