-
Security Bulletin for Adobe Acrobat and Reader | APSB19-02
An attacker could exploit these vulnerabilities to take control of an affected system. Reminder: It is hard to avoid system administrator read the pdf format of document during installation. If such vulnerability occur, it is very dangerous! Official announcement: https://helpx.adobe.com/security/products/acrobat/apsb19-02.html
-
Security Notification – Schneider EVLink Parking (Dec 2018)
Preface: Electric vehicles (EVs) have no tailpipe emissions. Replacing conventional vehicles with EVs can help improve roadside air quality and reduce greenhouse gas emissions. Technical background: Level 2 electric car chargers deliver 10 to 60 miles of range per hour of charging. They can fully charge an electric car battery in as little as two…
-
Behind growth of APT attack
Preface: The objective of an APT attack is usually to monitor network activity and steal data. But the APT historical records shown that there are APT attacks intend to damage the network or organization. APT might not easy to detect: VM handler able to relocate and move code because of ASLR (address space layout randomization)…
-
Schneider Electric Security Notification – Nov and Dec 2018
Preface: Business Insider predicts business spending on IoT solutions will hit $6 trillion by 2021. Technical background: EcoStruxure is Schneider Electric’s IoT-enabled, plug-and-play, open, interoperable architecture and platform, in Homes, Buildings, Data Centres, Infrastructure and Industries. Vulnerability details: Security Notification – Embedded Web Servers for Modicon V2 : https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2018-327-01-Embedded-Web-Servers-Modicon-V2.pdf&p_Doc_Ref=SEVD-2018-327-01 Security Notification – Power Monitoring Expert,…
-
vRealize Operations updates address a local privilege escalation vulnerability – CVE-2018-6978 (18-12-2018)
Preface: Open a command prompt and type the following commands in sequence. Download vSphere PowerCLI from the Download page of the VMware Web site and install the vSphere PowerCLI software. Technical background: VMware vRealize Operations will help customers derive even more value from a “Self-Driving” approach to operations management. For instance: Intent-Driven Continuous Performance Optimization…
-
Multiple Vulnerabilities in WIBU-SYSTEMS WibuKey Network server management
Preface: Over 3,000 companies around the world to protect intellectual property and other digital content deployed WibuKey Digital Rights Management (DRM) solution. Technical background: Keep documents safe and stay compliant, while protecting your digital assets without impacting productivity. Digital Right Management (DRM) solution is a file-based security system that prevents exposure of sensitive and confidential…
-
Microsoft Windows MsiAdvertise Product function vulnerable to privilege escalation via race condition – 20th DEC 2018
Preface: MsiAdvertiseProduct function enables the installer to write to a script the registry and shortcut information used to assign or publish a product. Vulnerability details: Due to improper validation, the affected function can be abused to force installer service into making a copy of any file as SYSTEM privileges and read its content, resulting in…
-
OpenSource user mode file system for Windows, software driver contains a stack-based buffer overflow – 20th Dec 2018
Preface: Dokan is a user mode file system for Windows. It allows anyone to safely and easily develop new file systems on Windows operating systems. Technical details: When you want to create a new file system on Windows you need to develop a file system driver. Developing a device driver that works in the kernel…
-
CVE-2018-8653 | Scripting Engine Memory Corruption Vulnerability
Preface: “I Saw Mommy Kissing Santa Claus” is a famous Christmas song.But perhaps that it is the hacker kissing your Internet Explorer web browser before christmas time. Above description has similarity because both two people are the famous guy in the world. Detail description: ChakraCore is the core part of Chakra, the high-performance JavaScript engine…
-
Cyber security practitioner must stay alert! (Cisco security advice) – 19th Dec 2018
Preface: Firewall solutions are essential to protect organizations from potential cyber threats. HTTPS is used to make communication between the server and the browser secure. Key factor of Cyber security:It is hard to avoid vulnerability will be occured in digital products today. But the most critical issue is that how to know and the efficiency…