-
CVE-2019-11036 – Successful exploit could allow the attacker to access sensitive information (30th Apr 2019)
Preface: PHP is a scripting language that runs on a computer. Its main purpose is to process dynamic web pages, including command-line runtime interfaces or to generate graphical user interface programs. Vulnerability details: A vulnerability in the EXIF component of PHP could allow an unauthenticated, remote attacker to access sensitive information on a targeted system.…
-
CVE-2019-1867 – Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability (May 2019)
Preface: A vulnerability in the REST API of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to bypass authentication on the REST API. About Rest API: The attacker could be at the client side, sometimes it compromise of your REST API and, where the victim is the REST API server, so the…
-
CVE-2019-11683 – A vulnerability in the udp_gro_receive_segment function of the Linux Kernel could cause denial of service (May 2019)
Preface: 78% of vulnerabilities are found in indirect dependencies, making remediation complex – said snyk.io. Description: GSO for UDP: Segmentation offload reduces cycles/byte for large packets by amortizing the cost of protocol stack traversal. Vulnerability details: udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x through 5.0.11 allows remote attackers to cause a denial of service.…
-
May 2019 – Printerlogic shown weak vulnerability management
Preface: Patch management is the best practice of upgrading existing software applications to remove any weak security patches that could be exploited by hackers. Background: PrinterLogic’s printer and driver management platform reduces infrastructure costs by eliminating print servers and providing centralized management of every printer on the network. Sold in both on-premise and cloud configurations,…
-
CVE-2019-1002101: Vulnerabilities found in Kubernetes’ kubectl cp command (3rd May 2019)
Preface: Some supercomputers in the world, they are also using Kubernetes. Technical background: kubectl controls the Kubernetes cluster manager.Make use of “kubectl cp” command is able to copy files and directories to and from containers. Vulnerability details: An attacker can fool a user to use the kubectl cp command to copy and store a malicious…
-
2nd May 2019 – Don’t let you SAP facility become a cyber attack target
Preface: Heard that estimated total of 1,000,000 SAP production systems could currently be at risk of being hacked. Technical details: When you configure sap router (saprouter) to allow remote (from the Internet) connections via the SAP GUI. The original design will add entries to the route tables for TCP port 3300, 3301, and 3303 the…
-
Cisco Security Advisories and Alerts – 1st May 2019
Preface: People judge an issue depends on your point of view. A design flaw or limitation of product in normal view point will make people dissatisfy. It is annoying and blame the designer what he is doing, does he dreaming? From hacker point of view, the flaw can become a backdoor. Highlight: CVE-2019-1804 – Cisco…
-
CVE-2019-11596: Memcached lru Commands NULL Pointer Dereference Vulnerablity – 29th Apr 2019
Preface: In modern smart world, efficiency is the key words. Do we need that? Background: Memcached is a decentralized cache memory system. Use Memcached can improve database performance. Redis and Memcached are popular today. The reason is that both are the open-source products. And they can boost up database performance. Redis and Memcached are both…
-
CVE-2019-11577 – dhcpcd up to 7.2.0 dhcp.c DHO_OPTSOVERLOADED memory corruption (29th Apr 2019)
Preface: IT world can’t without DHCP function! It looks like public vehicle in our daily life. Background: dhcpcd is a DHCP and DHCPv6 client. It is currently the most feature-rich open source DHCP client. Vulnerabilities Details: One of the vulnerabilities exists because the dhcp6_findna() function (src / dhcp6.c source code file) does not correctly handle…
-
Docker Hub hack! 25th Apri, 2019
Preface: Docker Hub hack exposed data of 190,000 users Incident details: On Thursday, 25th April, 2019 Docker Hub discovered unauthorized access to a single Hub database storing a subset of non-financial user data. Impact: Data breach includes usernames and hashed passwords for a small percentage of these users, as well as Github and Bitbucket tokens…