Preface: The NFS 4.1 design flaw was released in August 2019 because it only affected the Linux operating system kernel at the time. It was hard to predict, and now it is going to the Windows platform! Background: Using the NFS protocol, you can transfer files between computers running Windows and other non-Windows operating systems,…

Preface: The vulnerability was fixed in Aug 2022. This is not a zero day and therefore published this month. Background: ext4 is the default file system for many Linux distributions including Debian and Ubuntu. Furthermore, ext4 is the default file system for DigitalOcean Volumes Block Storage. Also, Google has used Ext4 on Android since Android…

Preface: TEE is an area on the chipset that works like a TPM, but is not physically isolated from the rest of the chip. Background: The Trusted Execution Environment (TEE) is a secure area within the main processor. As an isolation environment, it ensures that the code and data loaded in the TEE are protected…

Preface: In former design weakness, attacker can smuggle commands using backticks in the “Name” field of the SAML Server configuration page. These commands are then executed as the root user of the underlying operating system.This article a speculation, since vendor do not have technical details provided in this CVE record. Background: FortiADC is an advanced…

Preface: The product does not sufficiently track and release allocated memory after it has been used. Such design weakness will belongs to CWE-401. Background: Snapdragon Heterogeneous Compute SDK: provides developers with the ability to allocate work to any of the three processors on Snapdragon. The SDK provides C++ API’s for the Kryo CPU and Adreno…

Preface: In order to avoid vulnerabilities, cloud service providers have their hands full! Background: It will be open-sourced under the name of StreamX in April 2021, renamed StreamPark in August 2022, and then formally become an incubation project of the Apache Open Source Software Foundation through voting in September.StreamPark is a streaming application development framework.…

Preface: Open source software fosters collaboration. As such, open source software will continue to play a key role in modern software development. Background: cloud-init is a software package that automates the initialization of cloud instances during system boot. You can configure cloud-init to perform a variety of tasks. Cloud-init is a service used for customizing…

Preface: If a website is hacked, cyber criminals don’t get access to your password. Instead, they just get access to the encrypted “hash” created by your password. Talking about hash algotithms, For example, MD5, SHA1, and so on.The length of a hash is always a constant, irrespective of the length of the input. For example,…

Preface: In next generation of computing technology, perhaps this so called next generation has came. Any software or hardware design weakness will affected our daily life. It looks that man kind does not have choice, an intangible force push the world to that zone. The situations similar gravity in our earth. Background: Parallel processing is…