-
CVE-2022-26490 – Do you care about NFC attacks (6th Mar 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: The…
-
About CVE-2022-26129 – buffer overflow encounter on FRR routing protocol suite (Linux and Unix platforms). 2nd Mar 2022
Preface: The reason why do I concerns this open source routing module? Because I predicted that vendors might used this routing module in their products. A well know idea is that routing device will select Linux system as a based OS. Background: FRRouting (FRR) is a free and open source Internet routing protocol suite for…
-
CVE-2021-3772 Not Yet Published, vulnerability found on Linux SCTP stack. Last Modified on: 2nd Mar 2022
Preface: SCTP is used mostly in the telecom area. Traditionally, telecom switches use SS7 (Signaling System No. 7) to interconnect different entities in the telecom network.From technical point of view, IP network is open and not reliable. This is why SCTP was developed. SCTP design objective: Emulate the advantages of the SS7 network accumulated over…
-
FortiAnalyzer & FortiManager – bypass of client-side password change policy enforcement (1st Mar 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: FortiAnalyzer…
-
CVE-2022-26181 Dropbox Lepton design weakness (1st Mar 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: Dropbox…
-
CVE-2022-25809 – Alexa versus Alexa (AvA) attack (24th Feb 2022)
Preface: Perhaps the risk of this vulnerability is not high. However, if attackers exploit specific design weaknesses. It’s hard to say if Lamda can’t direct the attack to the backend service cloud. Background: Alexa is able to play music, provide information, deliver news and sports scores, tell you the weather, control your smart home and…
-
CVE-2022-25335 – About RigoBlock Dragos design weakness (23rd Feb 2022)
Preface: Blockchain protocols are regulations and guidelines followed to achieve its decentralized and distributed nature, to ensure secure transactions, and more. There are three basic types of blockchain: public blockchain, consortium blockchain and private blockchain. Background: RigoBlock is a blockchain protocol that makes it possible for anyone to set up and run a digital token…
-
CVE-2022-23635 (Istio): Unauthenticated control plane denial of service attack.(22nd Feb 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: Istio makes…
-
CVE-2022-25255 – Missing validation of binaries executed via Qprocess (21st Feb 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: QProcess…
-
About CVE-2022-25375
Preface: In 2017, half of the world’s top 50 supercomputers used SUSE Enterprise Linux Server. Why does Linux dominate especially in supercomputer market? Linux is a free, open source operating system (OS), released under the GNU General Public License (GPL). Anyone can inspect or modify software “Source code”. Because of Linux cluster break the traditional…