-
Have you been renew and replace your current “Let’s Encrypt” certificate? 4th Mar 2020
Preface: Certificates will begin being revoked at 3 PM EST. 4th Mar 2020 Security Focus: Due to design defect, Let’s Encrypt had to rush to inform users about the revocation the SSL server certification that’ll be completed in less than 24 hours. The SSL/TLS certificates will be revoke by tomorrow, March 4 (at 00:00 UTC…
-
Windows Kernel Elevation of Privilege Vulnerability + PWN-OS-FAKE UPDATE Windows 10 (Local) – FeB 2020
Preface: You can load a custom dll in system32 via diaghub. Background: Starting from Windows 10, Microsoft introduced the Update Session Orchestrator service. As a regular user, you can interact with this service using COM, and start an “update scan” (i.e. check whether updates are available) or start the download of pending updates for example.…
-
tomcat ajp (cve-2020-1938) – vendor patched immediately. problem resolved. Feb 2020
Preface: What is the best way for web server and the servlet container do a communications? Technical details: The ajp13 protocol is packet-oriented. A binary format was presumably chosen over the more readable plain text for reasons of performance. It communication between the web server and the servlet container. Vulnerability details: The vulnerability impact the…
-
OpenSMTPD (CVE-2020-7247) – How did it happen? 24th Feb 2020
Preface: OPENSMTPD – plagued by numerous vulnerabilities. Most recently – CVE-2020-8794 Details: Qualys has found another critical vulnerability in OpenSMTPD.In normal circumstance, the adjacent side connects to the SMTP server and sends commands such as EHLO, MAIL FROM, RCPT TO. The SMTP server responds with a single or multiple lines of response: The client-side exploitation…
-
Vulnerabilities in VMware (RMI communication in vRealize Operations for Horizon) are also apply for those vendor who is using RMI in Java environment. (20th Feb 2020)
Preface: JMX is often described as the “Java version” of SNMP (Simple Network Management Protocol). Synopsis: A vulnerability in the Java Management Extensions (JMX) management agent included in the Java Runtime Environment (JRE) may allow a JMX client running on a remote host to perform unauthorized operations on a system running JMX with local monitoring…
-
APT Group attack major focus: time window before release and patched (19th Feb 2020)
Preface: In normal circumstance, the remediation of vulnerabilities is time consumption. Even though Software-based vulnerabilities policy allow up to 90 days for the vendor to provide a patch. Background: It looks that existing period of time can be happen plenty of matters. So far APT Group have talented and knowledge to discover the defect of…
-
FIFO project problem tracker – SEND_FILE_WITH_HEADER Use-After-Free (Feb 2020)
Preface: The security of FIDO deployment largely depends on the choice of underlying security subsystems and their implementation. Background: An ioctl , which means “input-output control” is a kind of device-specific system call. There are only a few system calls in Linux (300-400), which are not enough to express all the unique functions devices may…
-
Perhaps you don’t use Internet Explorer, you could still be at risk. Conduct patch install on IE today – 12th Feb 2020
Preface: If you try to open an .MHT file on a computer including Windows 10, or Windows Server 2012 R2 then it will attempt to load the file using Internet Explorer eventhough of the default browser in place! Security Focus: Microsoft released an emergency security update on Monday (February 10, 2020) to fix a vulnerability…
-
Learn more about CVE-2019-18634 – sudo vulnerability
Preface: Sudo (substitute user [or superuser] do) is a program used in Unix-like operating systems such as BSD, Mac OS X, and GNU / Linux to allow users to execute programs in a secure manner with special permissions (usually the system Super user). Highlight: When pwfeedback is set, sudo will provide visual feedback when the…
-
The endless story of the SMTP gateway – CVE-2020-7247
Preface: Ray Tomlinson sent the first email across a network, initiating the use of the “@” sign to separate the names of the user and the user’s machine in 1971, when he sent a message from one DEC-10 computer to another DEC-10. Synopsis: An SMTP relay is a protocol that allows email to be transmitted…