-
A specially crafted username through phpmyadmin can be used to trigger an SQL injection attack through the designer weakness – 30th Jan 2019
Preface: phpMyAdmin is a free software tool written in PHP, intended to handle the administration of MySQL over the Web. Description: Phpmyadmin sometimes similar is a gadget. It can help you reset your WordPress password. It seems to be very useful, but this time the vulnerability is equivalent to the Swiss Army Knife, thus breaking…
-
Python CVE-2019-5010 Remote Denial of Service Vulnerability – 15th Jan 2019
Preface: Programmer just spend 10 minutes write a python script then can listen UDP traffic. Even though we performing Google Search , the function is using Python code. Information background: Python has now become the most taught programming languages in Universities and Academica. Machine learning or artificial intelligence is learning Python because it is the…
-
CVE-2018-20720 Published: 2019-01-15: Terminal Reboot vulnerability in Relion 630 series version 1.3 and earlier release
Preface: IEC 61850 is an international standard defining communication protocols for intelligent electronic devices at electrical substations. Relion products have been designed to implement IEC 61850 standard. Vulnerability has been recorded to National Vulnerability Database – 15th Jan 2019: ABB Relion 630 series allow remote attackers to cause a denial of service (reboot) via a…
-
CVE-2019-1651 – Cisco SD-WAN Solution Buffer Overflow Vulnerability (23rd Jan 2019)
Preface: Cisco SD-WAN key advantage keen to reducing costs with transport independence across MPLS, 3G/4G LTE, etc. Meanwhile it improving business application performance and increasing agility. Technical background: The vSmart controller is the brains of the centralized control plane for the Viptela system network architecture. The vSmart controller runs as a virtual machine (VM) on…
-
TIBCO Security Advisory: January 16, 2019
Preface: Tycoon wants to invest in a football team. He wants to know which is the good team, how many matches they won in years, the revenue they generate,..etc. Believe that analyzing data solution (TIBCO Spotfire ) can help. TIBCO Spotfire technology Synopsis: Data virtualization time-to-solution is 5‒10X faster than traditional data warehousing and ETL.You…
-
22nd Jan 2019 – Apple security updates
Preface: Every computer has a finite amount of memory so OS might actually need to use more than is physically available on your system. As a result, it is hard to avoid sharing resources feature. Our security focus: In regard to security update announced by Apple. Our security focus of this topic will be follow…
-
CVE-2019-6446 NumPy pickle Python Module Remote Code Execution Vulnerability – 16th Jan 2019
Preface: Gamma-Ray Observatory Satellite Mission for the study of cosmic gamma-ray sources in the keV to MeV energy range. About Numpy and Gammapy: NumPy is an open source Python package for scientific computing. NumPy supports large, multidimensional arrays and matrices. NumPy is written in Python and C. NumPy arrays are faster compared to Python lists.…
-
CoreOS etcd Role-Based Access Control Authentication Vulnerability – 16th Jan 2019
Preface: Container Linux by CoreOS is an open-source lightweight operating system based on the Linux kernel and designed for providing infrastructure to clustered deployments, while focusing on automation, ease of application deployment, security, reliability and scalability. Found vulnerability: A vulnerability in CoreOS etcd could allow an unauthenticated, remote attacker to bypass security restrictions and gain…
-
Drupal Releases Security Updates – 16th Jan 2019
Preface: Drupal is a free and open source content-management framework written in PHP and distributed under the GNU General Public License. Security Focus: Drupal has traditionally depended on multiple external tools. Drupal core uses the third-party PEAR Archive_Tar library. In PEAR Archive_Tar before 1.4.4, there are several file operation with $v_header[‘filename’] as parameter (such as…
-
Security Focus – Critical Path Update contains 3 new security fixes for the Oracle Database Server – 15th Jan 2019
Preface: Computer system vulnerability wreak havoc, IT life not easy! Background: Oracle’s revolutionary cloud database features autopilot, self-protection, and self-healing capabilities designed to eliminate error-prone manual data management. But the Core RDBMS vulnerability still exists! Security focus – CVE-2019-2444: Since it did not provide the details. We supculated that even if you revoke the CREATE…