-
VMware security update (25th AUg 2021)
Preface: VMware has released a security update on August 24, 2021 to address vulnerabilities in multiple products. In addition, the risk level of these vulnerabilities is between 4.4-8.6 (CVSS-V3). So it attracted my interest in reading it. Background: The vRealize Operations Manager API Programming Guide provides information about the vRealize Operations Manager REST APIs, including…
-
If you are the Open Source Platform (Istio) user, please stay alert! 24-9-2021
Preface: Today developers are using Docker to build modules called Microservices, which decentralize packages and divide tasks into separate, stand-alone apps that collaborate with each other. Background: A sidecar proxy is an application design pattern which abstracts certain features, such as inter-service communications, monitoring and security, away from the main architecture to ease the tracking…
-
Do you know the design weaknesses of Eclipse Cyclone DDS? 23-08-2021
Preface: DDS is used in the following industries. DDS is used to share Flight data within and across Air Traffic control centers. DDS is used to Smart Factories to provide horizontal and vertical data integration across the traditional SCADA layers.DDS used to control the 100.000 mirrors that make up ELT’s optics. Technical background: DDS applications…
-
CISA cyber Security Alert – About the May 2021 MS patch (21st Aug, 2021)
Preface: With Exchange Server vNext, Microsoft is phasing out the on-premise delivery model, making Exchange Server 2019 the last on-premise product version. Point of view: Perhaps quite a lot of people will be surprised of this notification. Since more and more organizations has been migrated the mail server to office 365. The patch issued on…
-
There’s no best of both sides – CVE-2021-25218: BIND 9.16.19 and 9.17.16 triggered denial of service when applied too-strict assertion check. (19th Aug, 2021)
Preface: (BIND) is the most popular Domain Name System (DNS) server in use today. It was developed in the 1980s at the University of Berkleyand is currently in version 9. Technical Background: For IPv4 packets, Path MTU Discovery works by setting the Don’t Fragment (DF) flag bit in the IP headers of outgoing packets. Some…
-
As an end user, are you concerned about the CVE-2021-28372 vulnerability? 17th Aug 2021
Preface: The Kalay platform contains a major vulnerability that will allow hackers to remotely access IoT devices. Background: Kalay Platform 2.0 This newly developed decentralized structure simplifies the role of the primary server to work as an intermediary transmitter,which reduces the chances of a server being compromised or data being intercepted. Kalay 2.0 is designed…
-
CISA Urges Beware of BlackBerry (QNX RTOS) Vulnerabilities – 17th Aug 2021
Preface: BlackBerry OS was discontinued after the release of BlackBerry 10. BlackBerry 10 is based on QNX, a Unix-like operating system that was originally developed by QNX Software Systems until the company was acquired by BlackBerry in April 2010. It supports the application framework Qt (version 4.8) and in some later models features an Android…
-
CVE-2021-38197 – vulnerability encountered in “go-unarr”. Not suggest to use until it fix. (16th Aug, 2021)
Preface: Gobot is a framework for robotics, drones, and the Internet of Things (IoT), written in the Go programming language. The design goal of the decompression library is for embedded devices, because the flash memory capacity is limited and the processing speed is slow. Background: Package unarr is a decompression library for RAR, TAR, ZIP…
-
A vulnerability in the XML data compression tool (Xml) jeopardizing the Schneider Control Expert software (16th Aug, 2021)
Preface: Since xml data is irregular and verbose, it can impact both query processing and data exchange. Background: XMill is a tool for compressing XML data efficiently. It is based on a regrouping strategy that leverages the effect of highly-efficient compression techniques in compressors such as gzip (Please refer to attached diagram for details). The…
-
CVE-2021-34484 – Was the error that occurred a return? 12th Aug 2021
Preface: Type the following command and hit Enter. mklink /J “path to junction link” “path to target folder”. The junction link is thus created. Background: By creating a new folder structure, changing the user’s shell folder registry key, and placing a connection point in the hierarchy,you can open any other UsrClass[.]dat file on the system…