-
Jackson is very popular choice for processing JSON data in Java but has critical vulnerabilities occurred. Developer must staying alert(Jan 2019)
Preface: In Java development, software developers will often need to read in JSON data, or provide JSON data as an output. But Java JSON Processing API is not very user friendly and doesn’t provide features for automatic transformation from Json to Java object. Jackson technical background: Jackson is a suite of data-processing tools for Java…
-
Linux Kernel mincore() Implementation Information Disclosure Vulnerability – 12th Jan 2019
Preface: Hard drives are slower and they affect loading and saving (read and write) times only. Technical overview: The mincore() function requests a vector describing which pages of a file are in core and can be read without disk access. Vulnerability occurred: A vulnerability in the mincore() function in the Linux Kernel could allow a…
-
CVE-2019-0246 Multiple Vulnerabilities in SAP Cloud Connector – January 2019
Preface: Using both private and public clouds in parallel allows company to pick and choose which data and services they want to keep in the private cloud for added security, and which in the public cloud. This is so called a hybrid cloud concept. Vulnerability found on SAP cloud connector: SAP Cloud Connector, before version…
-
Has the extraterrestrial (E.T.) established a hydrogen line to observe our planet since ancient times?
Preface: Principle in the detection of radio signals from space is the Hydrogen atom. The hydrogen atom comprises a proton and an electron. It emits radioenergy at a wavelength of 21 cm or a frequency of 1420 MHz. Background: The Egyptian pyramids are ancient pyramid-shaped masonry structures located in Egypt. But the archaeologist found that…
-
Simple and powerful evasion technique – Threat actor will be exploit MS word document.
Preface: Preface: Threat Intelligence vendor (FireEye) alert that Global DNS Hijacking Campaign rapidly growth. This storm affected dozens of domains belonging to government, telecommunications and internet infrastructure entities across the Middle East and North Africa, Europe and North America. Synopsis: More information about the impact of this cyber attack.. Please refer to below url for…
-
9th Jan 2019 – Security Focus (Juniper Networks)
Preface: Historically, telecommunications companies have been the largest customer segment for Juniper. Juniper has provided them with on-premises hardware — routers and switches — for the purpose. Background of XML C parser: Libxml2 is the XML C parser and toolkit developed for the Gnome project. Libxml2 is made of multiple components; some of them are…
-
Cisco Releases Security Updates Published Wednesday, January 9, 2019
Preface: Crimes that use computer networks or devices to advance other ends includes Phishing scams and Spam. S/MIME technical background: S/MIME is based on asymmetric cryptography to protect your emails from unwanted access. It also allows you to digitally sign your emails to verify you as the legitimate sender of the message, making it an…
-
Apple IntelHD5000 Graphics Process Token Privilege Escalation Vulnerability – CVE-2018-4421
Preface: A third of people have a virus on their device from porn, said Dailymail.co.uk Description: If you like watch the adult movie online and you are Mac book air user. Please staying alert! Hacker Jeopardize your Mac Book Air by Adult movie. Impact: An application may be able to execute arbitrary code with kernel…
-
Microsoft Patch Tue – Security Focus CVE 2019-0556 | Microsoft Office SharePoint XSS vulnerability
Preface: SharePoint is unquestionably one of the best and most significant enterprise productivity tools for user. It similar OneDrive for Business and Apps functions. Vulnerability found on SharePoint – 2019 Jan CVE 2019-0556 | Microsoft Office SharePoint XSS vulnerability The attacks could allow the attacker to read content that the attacker is not authorized to…
-
CVE-2018-17195 – Apache NiFi Template Upload API Endpoint Cross-Site Request Forgery Vulnerability
Preface: What Is Big Data and Why Do We Need It? A complex reason of this question. In short sentence to describe, business and human being looking for operational efficiency to improve the daily life. Technical background of Apache NiFi: Apache NiFi can help you get your S3 data storage into proper shape for analytic…