-
OSIRIS-REx accomplished feat, next station is Apophis (24-09-2023)
Preface: A long-awaited asteroid sample has landed in the US, said CNN – https://edition.cnn.com/2023/09/24/world/osiris-rex-asteroid-sample-return-scn/index.html Background: Asteroid 101955 Bennu – Level 3 on the Palermo impact hazard index, a small celestial body with the highest risk of impacting the Earth. Early in the history of the solar system, the gravity of newly formed Jupiter brought an…
-
About CVE-2023-41993: The issue was addressed with improved checks for iOS and related OS products including Safari.(21-09-2023)
Preface: Perhaps this isn’t the first time this year we’ve heard of Safari and iOS having design flaws. Since both elements are close to each other. It is inevitable that it may have an impact. In addition, Safari includes open source code. So when a design flaw is discovered, sometimes the results look similar. The…
-
CVE-2023-22024: A malicious local user can crash the Unbreakable Enterprise Kernel (20-09-2023)
Preface: The Unbreakable Enterprise Kernel (UEK) is a Linux kernel built by Oracle and supported through Oracle Linux support. Reliable Datagram Sockets (RDS) is a high-performance, low-latency, reliable, connectionless protocol for delivering datagrams. It is developed by Oracle Corporation. It was included in the Linux kernel 2.6.30 which was released on 9th of June, 2009.…
-
CVE-2023-32187 : K3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack (19-09-2023)
Preface: A Subject Alternate Name (or SAN) certificate is a digital security certificate which allows multiple hostnames to be protected by a single certificate. A SAN certificate may also be called a Unified Communication Certificate (or UCC), a multi-domain certificate, or an Exchange certificate. A Subject Alternative Name (SAN) certificate is capable of supporting multiple…
-
CVE-2023-4806 security focus: Corrective solution avoid glibc vulnerability occur in zero-day state (19-09-2023)
Preface: This vulnerability published on September 12, 2023. It had CVSS V3 base score 5.3. But based on the vulnerability details described, it seems it is unknown causes. But why does it happen? Background: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other…
-
CVE-2023-4863 burdens web browsers includes Edge browser (18th Sep 2023)
Preface: What is the difference between WebP and JPEG files? Both file types compress the image, making it easier to share and store. However, WebP files are typically much smaller than traditional JPEGs. Background: Microsoft Edge (Chromium), it was first released in 2015 as the successor to Internet Explorer and is based on Google’s Chromium.If…
-
About Aliens corpses in Mexico: If I am real (17 Sep 2023)
Preface: Any matters would have two different angle (positive and negative). If you stand on negative side, even facts in front of you. Perhaps you still questioning. On Sep 2023, there is other new round of aliens corpses discover news. But this time look special, it goes during Mexico’s congress meeting, politicians held their first…
-
Hong Kong Cyberport is plagued by ransomware! (15th Sep 2023)
Preface: On 13th Sep 2023, There is another new development in the cyberport hacker incident, said wepro180[.]com. The 400GB of stolen data was disclosed on the dark web on Tuesday (12/9), including employee salaries, applicant resumes, credit card information and other sensitive documents. Cyberport said it has directly contacted those who may be affected. Think…
-
CVE‑2023‑25519: About NVIDIA BlueField data processing unit (DPU) – 13th Sep 2023
Preface: Ubuntu Server 22.04 ships with NVIDIA BlueField DPUs as commercial-grade Linux distribution with continuous OS and security updates. DOCA software is available on every leading operating system as a standalone package without a bundled OS for Arm® and x86 architectures. Background: The NVIDIA cloud-native supercomputing platform leverages the NVIDIA BlueField DPU architecture with high-speed,…
-
CVE-2023-4813 – A flaw was found in glibc (13th Sep 2023)
Preface: Technicians tend to focus on zero-day vulnerability status. Makes sense. However, the computer world expands from workstations and intranets into the IoT world. The Internet of Things master put the workstation project into the IoT catalog early on. At the same time, software includes operating system platform and programming language design, and is not…