Cyber security technical information

Category: Potential Risk of CVE

  • Bitcoin exchanges must remain vigilant to low value coins

    Heard that a vulnerability found on cryptocurrency (FuturXE (FXE)). The problem is that smart contact designer make a programming logic mistake. Department of Homeland Security confirm the bug this week. (CVE-2018–12025) – https://nvd.nist.gov/vuln/detail/CVE-2018-12025 The vulnerabilities and cyber attack looks never stop so far. Do you still remember virtual currency exchange Coincheck lost $400 million in…

  • My reflections – Why do we require complete artificial intelligence into daily life?

    The important thing is to never stop questioning, said Albert Einstein. Since there is no prefect design items in the world. and therefore bug fix or so called software patch update is the acceptable method. So when I heard Apple issued the security update for Siri (speech recognition application program). As usual I will be…

  • June 13, 2018 – ISC Releases Security Advisory for BIND

      Operating system · Linux, NetBSD, FreeBSD, OpenBSD, macOS, Windows · Type · DNS server · License · Mozilla Public License (ISC license before 9.11). Website, www.isc.org/downloads/bind. BIND is the most widely used Domain Name System (DNS). ISC Releases Security Advisory for BIND Published Wednesday, June 13, 2018 – A remote attacker could exploit this…

  • June 12, 2018 – VMware Releases Security Update

    VMware release security update to avoid remote code execution. The attacker could exploit this vulnerability to take control of an affected system before do the security update. Details shown as below (url): https://www.vmware.com/security/advisories/VMSA-2018-0015.html

  • June 2018 – Cisco releases security update for their products

    The marketing strategy of Cisco covered full scope of Cyber security and computer world. Since provides a wide angle of functional product features are hard to avoid vulnerabilities occurs. And therefore the security update are in frequent on the way. No harm! This is the IT world. Cisco IP Phone 6800, 7800, and 8800 Series…

  • 29th May 2018 – VMware security update – CVE-2018-6964

    Found VMware Horizon Client (Linux) contains design weakness causes privilege escalation vulnerability. I speculate that the vulnerability only happened on Horizon client for Linux. And therefore it can’t bring the IT guy attention. But do not ignore this vulnerability. As we know, ESXi 6.5 could allow an autenticated VNC session to cause a heap overflow…

  • June 2018 – Google Releases Security Update for Chrome

    Content Security Policy (CSP) provides a standard HTTP header that allows website owners to declare approved sources of content that browsers should be allowed to load on that page. Browser based XXS protection mechanism. Least privilege approach that whitelists content you trust. Nothing else will execute. Assumes that inline scripts are bad. But…………. High CVE-2018-6148:…

  • May 2018 – Moodle security announcements

    LMS (Learning Management System) become popular because it wasn’t limit learning area and time zone. Learner or student can start the tution when computer connect to internet. Such learning atomosphere are popular in the world. LMS not restricted to high school and university educations. It also covered internal training in business environment. Moodle is a…

  • June 06, 2018 – Cisco Releases Security Updates for Multiple Products

    CVE-2018-0321 – Cisco Prime Collaboration Provisioning Unauthenticated Remote Method Invocation Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-rmi CVE-2018-0315 – Cisco IOS XE Software Authentication, Authorization, and Accounting Login Authentication Remote Code Execution Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-aaa CVE-2018-0353 – Cisco Web Security Appliance Layer 4 Traffic Monitor Security Bypass Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-wsa CVE-2018-0320 – Cisco Prime Collaboration Provisioning SQL Injection Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-sql CVE-2018-0318 –…

  • The influence of CVE-2018-11235 more than expected. Even the Hyperledger project is included.

    Git community disclosed a high serverity of vulnerabilies (CVE-2018-11235). Since the impact of this vulnerabilities might influence many software application. The major design weakness of this vulnerability is that when you git clone a repository, there is some important configuration that you don’t get from the server includes .git/config file, and things like hooks, which…