-
CVE-2019-14544 Gogs Permission Checking vulnerability Aug 2019
Preface: If you are not yet ready to share your project on GitHub. You can host your own Private GitHub. It is Gogs. Product background: The goal of Gogs is to make the easiest, fastest, and most painless way of setting up a self-hosted Git service. So all the design concept, program code and perhaps…
-
CVE-2019-11042 PHP flaw form a way to read past the allocated buffer. This may lead to information disclosure or crash. Aug 2019
Preface: We knew Python programming language has large footprint in IoT world. Have you heard PHPoC (PHP on Chip) – a programming language and an IoT hardware platform? So, PHP programming language still have survival space. Background: The EXIF headers tend to be present in JPEG/TIFF images generated by digital cameras. In order to read…
-
How smart of the smartcity, depends on your vulnerability management (CVE-2019-14462 & CVE-2019-14463) Aug 2019
Preface: Why should we driven Artificial Intelligence like a maniac? We are mankind! MODBUS techincal background: Modbus is a communication protocol developed by Modicon systems. In simple terms, it is a method used for transmitting information over serial lines between electronic devices. The device requesting the information is called the Modbus Master and the devices…
-
Australian Cyber Security Centre urge his citizen beware of Password Spraying Attacks
Preface: Even though you company install full set of cyber defense mechanism. More than 70% of feature is detective and preventive. Perhaps SIEM can do a predictive action. May be you have doubt, but it is factual. Details: Australian Cyber Security Centre urge his citizen beware of Password Spraying Attacks (refer below url): https://www.cyber.gov.au/sites/default/files/2019-08/2019-130_-_password_spray_attacks_detection_and_mitigation_strategies.pdfSuch activities…
-
CVE-2019-1125 Status update 6th Aug 2019
Preface: GS register is used to differentiate between usermode and kernel mode range of address, after adding the relevant logical address component. The instruction swapgs is used to swap the GS register with the MSR values, and only in privileged mode this can be done. Vulnerability details: CVE-2019-1125 was made public today or also referred…
-
Das U-Boot Self-Referential DOS Partition Table Infinite Recursion Vulnerability Aug 2019
Vulnerability details: A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. Introduction: Das U-Boot a popular primary bootloader, it widely used in embedded devices to fetch data from different sources and run the…
-
iot devices security alert – cve-2019-14379 Aug 2019
What is Jackson Databind used for? Data Binding API is used to convert JSON to and from POJO (Plain Old Java Object) using property accessor or using annotations. It is of two type. Simple Data Binding – Converts JSON to and from Java Maps, Lists, Strings, Numbers, Booleans and null objects. What is Ehcache? Ehcache…
-
VMware Releases Security Updates for Multiple Products – August 3, 2019
Preface: Are GPU vulnerable to hacker attacks? Background: On virtual machines running VMware Fusion provides support for OpenGL 2.1 to support 3D accelerated desktops. It is not enabled by default on ESXi and is enabled by default on Workstation and Fusion. Vulnerability details: CVE-2019-5521 – may lead to information disclosure or may allow attackers with…
-
Have you heard of the “Capital one” data leak! July 2019
Cyber criminal is under arrested. She is accused of breaking into a “Capital One” computer facility and gaining access to 140,000 Social Security numbers, 1 million Canadian Social Insurance numbers and 80,000 bank account numbers. Security Focus : Cyber criminal is under arrested. She is accused of breaking into a “Capital One” computer facility and…
-
CVE-2019-10142 Freescale hypervisor management driver integer overflow in ioctl – jul 2019
Preface: The Freescale hypervisor management driver provides several services to drivers and applications related to the Freescale hypervisor. About: Integer overflows and other integer manipulation vulnerabilities frequently result in buffer overflows. An integer overflow occurs when an arithmetic operation results in a number that is too large to be stored in the space allocated for…