-
CVE-2020-2696 Local privilege escalation via CDE dtsession – JAN 2020
Technical Background: How to manages a CDE session? The dtsession command provides session management functionality, compliant with ICCCM 1.1, during a user session, from login to logout. It starts a window manager and allows users to save a session, restore a session, lock a session, start screen savers, and allocate colors for desktop-compatible clients. Vulnerability…
-
NewsOne design weakness – Arbitrary File Upload (18th Jan 2020)
Preface: Arbitrary File Upload but require regular user sign in. Perhaps it lose the access control! Product description: NewsOne is a web based application and fully responsive news & magazine script. Anyone can start your own media/press website with just few clicks without any codding knowledge. Vulnerability details: Auth as a regular user. Go to…
-
MS CryptoAPI spoofing flaw – 15th Jan 2020
Preface: We are all scared of Ransomware! Background: crypt32.dll is a type of DLL file, with extension of .dll. It is associated with Crypto API32 and is used to run Crypto API32 based applications. Certain sophisticated video games and software applications use crypt32.dll to get access to certain API functionality, as provided by Windows. Vulnerability…
-
Return to basis – access control (CVE-2020-3941) – Jan 2020
Preface: A race condition allows an attacker to access a shared resource, which can lead to an attack by other participants using the resource. Background: VMware Tools is a set of services and modules that enable several features in VMware products for better management of, and seamless user interactions with, guests operating systems. Vulnerability details:…
-
Path traversal attack poses a major risk to web application security. Do not contempt! Jan 2020.
Technical background: A layer 7 load-balancer takes routing decision based on IPs, TCP or UDP ports or any information it can get from the application protocol (mainly HTTP). It is a Linux operating system based of machine. HTTP and HTTPS are the predominant Layer 7 protocol for website traffic on the Internet. A path traversal…
-
CVE-2020-1603 vulnerability filed by Juniper, as a matter of fact, it includes all the routing product who make use of linux base OS – 12th Jan 2020
Preface: kdump is a feature of the Linux kernel that creates crash dumps in the event of a kernel crash. When triggered, kdump exports a memory image (also known as vmcore) that can be analyzed for the purposes of debugging and determining the cause of a crash. Vulnerability details: Improper handling of specific IPv6 packets…
-
is it a scenario replay of cve-2019-15975 & cve-2019-15976?
Preface: REST APIs are stateless. Stateful APIs do not adhere to the REST architectural style. Background: SOAP is a protocol, and REST is an architectural style. A REST API can actually utilize the SOAP protocol, just like it can use HTTP. The Cisco Fabric Automation REST APIs for third party applications enables you to programmatically…
-
Design weakness found 1 year ago (Jan 2019), but the details expose today! Fortinet FortiSIEM 5.2.5 / 5.2.6 Hardcoded Key (Jan 2020)
Preface: Stupid Solutions to Stupid Problems: Hardcoding Your SSH Key in the system. Vulnerability background: FortiSIEM 5.2.5 / 5.2.6 could use the hardcoded password to log in to the underlying system via Secure Shell (SSH). This means that anyone with access to any FortiSIEM image (to copy the SSH private key) can authenticate successfully via…
-
In order to avoid MS ‘.Group’ file handling RCE vulnerability. Think it before click – Jan 2020
Preface: Perhaps you would say the ‘.group’ file handling is the design defect. So hacker exploit social engineer trigger this vulnerability (GROUP FILE URL FIELD CODE EXECUTION). Do you agree? What is a GROUP file? The file is located inside this location: C:\Program Files\Windows Mail. Vulnerability details: Microsoft Windows is prone to a remote code-execution…
-
Phishing email compromised the reputation of company, Microsoft take legal action
Preface: Microsoft products cover a wide range. Perhaps quite a lot of people queries design weakness of their products. But they have capabilities to protect it own. Background: The cyber criminal exploit Microsoft official domain name to made phishing email and goal to increase the possibility to open the email. Meanwhile the malicious infection technique…