-
headline news – cyber attackers from exploiting web servers via web shell malware. 23rd Apr 2020
Preface: Web shells are a well-known attacker technique, but they are often difficult to detect because of their proficiency in blending in with an existing web application. Details: to gain root access to server. Web shells malware are frequently chosen by APT group; however these are just a small number of known used web shells.…
-
Buffer Overflow (SEH Bypass), perhaps it is easy to encounter in medical software system (20th Apr 2020)
Preface: IoT Enterprise runs on 32-bit and 64-bit x86 chipsets with support for Universal Windows Platform (UWP) apps as well as Classic Windows(e.g. Win32 and .NET) applications. Perhaps you will discover plenty of medical devices still use 32 bit windows application. Recent security alert on medical product: The ‘DICOM Viewer 2.0’ capable of handling all…
-
winducms – attacker exploit php feature cause sql injection and REC (20th Apr 2020)
Preface: Why we found vulnerability on apps in frequent? Fundamentally, apps goal provided services and function. Even though you said it is a design weakness. But protection control should relies on other separate service or component. It will increase the difficulties for attacker when you install the antivirus(malware) on your mobile phone. Vulnerability background: Windu…
-
Cisco security advisory – Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (17-Apr-2020)
Preface: The protocols and the interfaces used by the controller to communicate with the application layer are called the Northbound interface. Protocols used for communication between the controller and forwarding nodes are called Southbound interface. Northbound communication is used to retrieve info or send instructions to the controller using APIs. Vulnerability details: Multiple vulnerabilities in…
-
Security Focus – April 2020 (Oracle security alert – cve-2020-2959)
Preface: Perhaps you have similar feeling, everytime when you read the cyber security announcement by Oracle. The first impression is that it has too many. Read into details, some items let you know the remediation process is in long run! Vulnerability detail: An unspecified vulnerability in the Analystics Web General component of Oracle BI Published.…
-
Security Focus – intel modular server (mfs2600kispp) vulnerability – 14th Apr 2020
Preface: The Global Data Center Blade Server market is projected to grow at a CAGR of 8.35% during the forecast period, reaching a total market size of US$23.535 billion in 2025 from US$14.548 billion in 2019, said ResearchAndMarkets.com’s. Vulnerability details: • authenticated attackers to potentially enable escalation of privilege via local access due to improper buffer…
-
To infinity…and beyond! VMware vCenter Server updates address sensitive information disclosure vulnerability in the VMware Directory Service – CVE-2020-3952
Preface: VMware announce that the external Platform Services Controller architecture is deprecated and will not be available in future releases. Background: Authentication and certificate management is handled by the Platform Services Controller. See attached diagram, the platform services controller original design place in a standalone box. It is advice to put together ( a vCenter…
-
Security Focus – Juniper Networks (9th April 2020)
Preface: Technology cannot fight against coronavirus in the moment.Easter, commemorating the resurrection of Jesus from the dead.Wish that human can managed to fight it all. Comparing with coronavirus. The vulnerability in computer system looks easy resolve. Security focus – Juniper Network product: A privilege escalation vulnerability in Juniper Networks Junos OS devices configured with dual…
-
CVE-2020-10808 Vesta Control Panel Authenticated Remote Code Execution 6th April 2020
Preface: Dockerized Vesta Control Panel aka vestacp. You can download vesta source code and modify it the way you want. You are totally free to do it so to Vesta is licensed under GPL Background: You are able to install and configure VestaCP on an Alibaba Cloud Elastic Compute Service (ECS) instance with CentOS 7…
-
Do you worry your camera on your iphone manipulate by hacker. 6th Apr 2020
Preface: Apple paid $75,000 to the hacker for reporting the camera hijacking bugs. As said, bug is never ending. Perhaps next round will be yours. Background: If you let your friend access your phone for 5–7 minutes, they could have downloaded spyware. Perhaps this action only for joking. As a matter of fact, hacker can…