Cyber security technical information

Author: admin

  • (CVE-2019-16919) VMware Cloud Foundation and VMware Harbor Container Registry for PCF address broken access control vulnerability 16th oct 2019

    Preface: It seems that humans are hard to avoid living with robots and AI, because this is our destiny. Background: VMware Harbor Registry is an enterprise-class registry server that stores and distributes container images. The release of Harbor 1.8 revealed a number of new features, including the ability to share Harbor with other registries. The…

  • CVE-2019-14379 (Oracle Banking Platform & Oracle Financial Services Analytical Applications Infrastructure) – Oct 2019

    Preface: Vendor vulnerability management program sometimes have doubt to public. They frequent ask, how to do the protection before patch release? Perhaps not require worry too much because zero-day vulnerabilities are go with us all the time. Synopsis: On October 2019, Oracle has released its Critical Patch Update for October 2019 to address 219 vulnerabilities…

  • Suspected that Podman-Varlink encounter Remote Code Execution – Under observation (14th Oct 2019)

    Preface: Red Hat is investing in CRI-O and Podman. Meanwhile they are involved in the Open Container Initiative Standards Organization. The goal is to contribute and introduce drive innovation in their products, such as Red Hat OpenShift and Red Hat Enterprise Linux. Background: Podman decide to provide a simple CLI for managing pods and containers.…

  • CVE-2019-17132 vBulletin through 5.5.4 mishandles custom avatars

    Preface: vBulletin™ is the world leader in forum and community publishing software. Vbulletin messenger make use of AJAX-based chat functionality.The main benefit of developing websites using Ajax is to help web browsers retrieve more data without causing a Web page to refresh. Vulnerability details: User input passed through the “data[extension]” and “data[filedata]” parameters to the…

  • 5g, where to go from here?

    Preface: Why some people want everything fast. But when a man is having dinner with his girlfriend, he hopes that time will be slower. 5G communication background: In April 2008, NASA partnered with Geoff Brown and Machine-to-Machine Intelligence (M2Mi) Corp to develop 5G communications technology. As times go by, On 3 April 2019, South Korea…

  • All users of iTerm2 should update immediately – Oct 2019

    Preface: iTerm2 not the default Mac terminal Vulnerability details: A vulnerability, identified as CVE-2019-9535, exists in the way that iTerm2 integrates with tmux’s control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal. This affects versions of iTerm2 up to and including 3.3.5. Technical background: iTerm2 with…

  • How to know your infrastructure under APT attack? NSA provide hints to cyber world (7th oct 2019)

    Preface: Before the earthquake, many special phenomena will awaken people. Does a similar situation apply to cybersecurity attacks, especially APT? Security focus: NSA has announcement a day ago. They urge the company must be extra care of vulnerabilities in Multiple VPN Applications. Are you interested of this article? Following URL can provide the details. https://media.defense.gov/2019/Oct/07/2002191601/-1/-1/0/CSA-MITIGATING-RECENT-VPN-VULNERABILITIES.PDF…

  • NCSC prediction – DNS monitoring will get harder (Sep 2019)

    Preface: DNS monitoring can let you predict the user behaviour. According to Cisco’s research, over 90% of attacks are done over DNS and only two-thirds of organizations monitor their DNS records. Technical details: Go to options->Advanced->Network->Settings->Automatic proxy configuration url and enter 8.8.8.8 All you Mozilla traffic uses Google dns now. Google Public DNS fully supports…

  • RTOS vulnerabilities found on July this year might impacting medical industry, said FDA (1st Oct 2019)

    Preface: The Department of Homeland Security (DHS) and FDA are aware that the (URGENT/11) vulnerabilities will be effected medical device and hospital networks. They released announcement to urge specify industry to staying alert. Vulnerability details: So called (URGENT/11) found on Wind River VxWorks on July 2019. Urgent11, it include 6 remote code defects and 5…

  • Preface: The heap is the portion of memory where dynamically allocated memory resides (i.e. memory allocated via malloc ). Background: Exim is a message transfer agent (MTA). It generally comes with default Debian installation. If you need to use ACL and other features you may need to install exim4-daemon-heavy (see below):– apt-get install exim4-daemon-heavy Vulnerability…