-
CVE-2023-4863 burdens web browsers includes Edge browser (18th Sep 2023)
Preface: What is the difference between WebP and JPEG files? Both file types compress the image, making it easier to share and store. However, WebP files are typically much smaller than traditional JPEGs. Background: Microsoft Edge (Chromium), it was first released in 2015 as the successor to Internet Explorer and is based on Google’s Chromium.If…
-
About Aliens corpses in Mexico: If I am real (17 Sep 2023)
Preface: Any matters would have two different angle (positive and negative). If you stand on negative side, even facts in front of you. Perhaps you still questioning. On Sep 2023, there is other new round of aliens corpses discover news. But this time look special, it goes during Mexico’s congress meeting, politicians held their first…
-
Hong Kong Cyberport is plagued by ransomware! (15th Sep 2023)
Preface: On 13th Sep 2023, There is another new development in the cyberport hacker incident, said wepro180[.]com. The 400GB of stolen data was disclosed on the dark web on Tuesday (12/9), including employee salaries, applicant resumes, credit card information and other sensitive documents. Cyberport said it has directly contacted those who may be affected. Think…
-
CVE‑2023‑25519: About NVIDIA BlueField data processing unit (DPU) – 13th Sep 2023
Preface: Ubuntu Server 22.04 ships with NVIDIA BlueField DPUs as commercial-grade Linux distribution with continuous OS and security updates. DOCA software is available on every leading operating system as a standalone package without a bundled OS for Arm® and x86 architectures. Background: The NVIDIA cloud-native supercomputing platform leverages the NVIDIA BlueField DPU architecture with high-speed,…
-
CVE-2023-4813 – A flaw was found in glibc (13th Sep 2023)
Preface: Technicians tend to focus on zero-day vulnerability status. Makes sense. However, the computer world expands from workstations and intranets into the IoT world. The Internet of Things master put the workstation project into the IoT catalog early on. At the same time, software includes operating system platform and programming language design, and is not…
-
CVE-2023-41064: Design weakness in iOS and macOS – Processing a maliciously crafted image may lead to arbitrary code execution (Released September 11, 2023).
Preface: Apple releases new iOS 15.7.9 and 16.6.1update for iPhone. iOS 15.7.9 and 16.6.1 like many of its predecessors, is a point upgrade and it patches up a security issue. But it doesn’t provides bug fixes technical details! Background: The Core Graphics framework is based on the Quartz advanced drawing engine. It provides low-level, lightweight…
-
Cumulus Linux design limitation: CVE-2023-25525 (11th Sep 2023)
Preface: When technology world relies on cloud computing. Meanwhile fast switching includes high speed backbone will be counted. The technology shift physical network device go to virtual computing platform. That said, the traditional design goal one software installs to one hardware unit. For instance, a single operating system install on one hardware device has been…
-
A closer look at Samsung’s CVE-2023-40353 (8th Sep 2023)
Preface: CWE-125 Out-of-Bounds Read is a type of software error that can occur when reading data from memory. This can happen if the program tries to read beyond the end of an array, for example. Out of bounds reads can lead to crashes or other unexpected vulnerabilities, and may allow an attacker to read sensitive…
-
About Redis – CVE-2023-41053 (8th Sep 2023)
Preface: Redis is a standard key-value store, like a dictionary, containing multiple keys, each with its unique value that can be retrieved or pinned. It is similar to a data structure server that relies on various key values. Redis has built-in replica functionality. It can hold keys to 512MB. Background: The Redis SORT_RO command is…
-
CVE-2023-28543 – Out of Bounds read in SNPE Library (5th Sep 2023)
Preface: The Qualcomm Neural Processing SDK is designed to help developers run one or more neural network models trained in TensorFlow, PyTorch,… Background: Deep neural network (DNN) models can address these limitations of matrix factorization. DNNs can easily incorporate query features and item features (due to the flexibility of the input layer of the network),…