Preface: Smart apps like your friend whenever you need one. Download the app and get a ride from a friendly driver within minutes. Product background: Engine.IO is a lightweight transport protocol that enables real-time bidirectional event-based communication between web browsers and a server. Python-engineio server can form a Eventlet asynchronous server and includes a small…

Preface: What is the difference of APT group and so called cyber attacker? In normal circumstance, the attack of APT group more often target different political factor of countries or benefits. Background: Physicists and engineers at CERN use the world’s largest and most complex scientific instruments to study the basic constituents of matter. Vulnerability details:…

Preface: Artificial intelligence especially custom face recognition will be using (ptrace_link). By attaching to another process using the ptrace call, a tool has extensive control over the operation of its target. Vulnerability detail: If a malicious unprivileged child uses PTRACE_TRACEME and the parent is privileged, and at a later point, the parent process becomes attacker-controlled…

Preface: Because telnet is not secure, people rely on SSH. Due to design limitations, SSH2 replaces SSH. In fact, SSH2 still has room for improvement. Technical Background – libssh2 is a client-side C library, which enables applications to connect to an SSH server. A vulnerability in client-side C library – The vulnerability was triggered when…

Differences Between Forward Proxy and Reverse Proxy:The main difference between the two is that forward proxy is used by the client such as a web browser whereas reverse proxy is used by the server such as a web server. Forward proxy can reside in the same internal network as the client, or it can be…

Preface: Fileless malware can resides within volatile storage components such as memory. About Redis: Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker. It supports data structures such as strings, hashes, lists, sets, sorted sets with range queries, bitmaps, hyperloglogs, geospatial indexes with radius queries…

Preface: The product of MatrixSSL is used by many companies. Since MatrixSSL design in low memory footprint. Whereby, they can partner with smart city infrastructure and IoT devices. Vulnerability details: A vulnerability in MatrixSSL could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. Our speculation: x509…

Preface: Cyber attack similar real world. There are different types of ideas and concepts in the world make humans become extreme. So we have war and different arguments. Besides, there are bacteria and virus try to infect our body. Kernel like tiny world, they also hits above circumstances. Vulnerability details: CVE-2019-10639 – Linux Kernel IP…