Preface: The Improper Access Control weakness describes a case where software fails to restrict access to an object properly. Background: Citrix Workspace ensures corporate data is safe and malicious activities are spotted quickly. If the installation is user-based, Citrix Workspace app must be installed for each user who logs on to the local machine. Vulnerability details:…

Preface: The term ‘NoSQL’ means ‘non-relational’. It means that MongoDB isn’t based on the table like relational database structure. Background: MongoDB storage format called BSON. It is similar to JSON format. Traditional database store data in tabular format. In a MongoDB database, data is stored in collections and a collection has documents. A document has…

Preface: vSphere 6.5 – introduction of several new REST APIs included in the vCenter Server Appliance (VCSA). Background: You can use vRealize Business for Cloud to manage the following VMware products and services: vCenter Server,vCloud Director,vRealize Automation & vRealize Operations Manage. Through the REST API. To get access VCSA appliance. The corresponding API endpoint for…

Background: DBUtil_2_3. Sys is a Windows driver. A driver is a small software program that allows your computer to communicate withhardware or connected devices. This means that a driver has direct access to the internals of the operating system,hardware etc. Vulnerability details: Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to…

Preface: US Homeland security urge their local country computer users should stay alert of multiple vulnerabilities matter on Pulse Secure product. Perhaps all the world should be aware of it. Synopsis: As times goes by, Pulse secure acquired juniper SSL VPN product for few years. Perhaps we can remember that Juniper is the active player…

Technical background: A Samba file server enables file sharing across different operating systems over a network. It lets you access your desktop files from a laptop and share files with Windows and macOS users. Vulnerability details: Unprivileged users can delete files in network shares that they shouldn’t access. However, vendor stated that they conduct analysis…

Preface: People say that when you walk through rough roads. A brand new road is waiting for you. Synopsis: Due to the small size of IoT devices, the main component chips will include memory and storage. Even WiFi function. Technically, hardware resembles a car. Therefore, the software (OS) is equivalent a car driver. If the…

Preface: BIND is the most commonly used DNS software on the Internet today. DNS servers that use BIND as server software account for about 90% of all DNS servers. BIND is now developed and maintained by the ISC(Internet Systems Consortium). Background: The ISC BIND server contained the vulnerable code within the Simple and Protected GSSAPI…

Preface: According to market statistic, 152 companies that use Apache OFBiz. The companies using Apache OFBiz are most often found in United States and in the Computer Software industry. Background: Apache OFBiz is a suite of business applications flexible enough to be used across any industry. OFBiz is an open source enterprise resource planning (ERP)…