-
The CVE-2020-0688 vulnerability affects Exchange Control Panel (ECP) components. Maybe it fixed it. However, because OWA is Internet-oriented, you still worry about it. 5th Mar 2020
Preface: To do the remedy of CVE-2020-0688, you need to install the security update in addition to the Cumulative Updates. Vulnerability Background: Microsoft using the same set of cryptographic keys on every Exchange Server installation. The keys being stored in plain text in a web.config file on every server. Details: Microsoft release the patch on…
-
Das U-Boot Self-Referential DOS Partition Table Infinite Recursion Vulnerability Aug 2019
Vulnerability details: A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. Introduction: Das U-Boot a popular primary bootloader, it widely used in embedded devices to fetch data from different sources and run the…
-
CVE-2019-0228 Apache PDFBox XML Parser XML External Entity Vulnerability – 22nd Apr 2019
Preface: We are all familiar with the .doc and .pdf formats. Because this is our choice in the business world. Synopsis: Apache PDFBox is an open source pure-Java library that can be used to create, render, print, split, merge, alter, verify and extract text and meta-data of PDF files. Vulnerability details: A vulnerability in Apache…
-
Remediation – Cisco IOS XR-64 Software for ASR 9000 series isolation feature vulnerability (17th Apr 2019)
Preface: One of the objective for Aggregation Services aim to provision and manage a huge number of separate physical platforms. As a result, the international vendor like Cisco also doing the transformation of the physical network devices. And therefore we seen VM devices OS system image today. Synopsis: In order to cope with cloud computing…
-
Simple and powerful evasion technique – Threat actor will be exploit MS word document.
Preface: Preface: Threat Intelligence vendor (FireEye) alert that Global DNS Hijacking Campaign rapidly growth. This storm affected dozens of domains belonging to government, telecommunications and internet infrastructure entities across the Middle East and North Africa, Europe and North America. Synopsis: More information about the impact of this cyber attack.. Please refer to below url for…
-
SamSam Ransomware variant – December 3, 2018
Preface: The Department of Homeland Security urge the world and United state staying alert of new wave of cyber attack. Technical details: SamSam ransomware is a custom infection used in targeted attacks, often deployed using a wide range of exploits or brute-force tactics. Most likely the goal of the action is interfere the society stability.…
-
DNSSEC Key Signing Key Rollover – 11th Oct 2018
Even Though end user not affected by the DNSSEC Key Signing Key Rollover. But at least we know the internet world what is happening. For more detail, please refer below url for reference. https://www.icann.org/ If run below command , result display (dnssec-failed.org. 7200 IN 69.252.80.75). It shown that DNSSEC is off. $ dig @$server dnssec-failed.org…
-
Vulnerability in SIMATIC WinCC OA V3.14 and prior – Sep 2018
SIMATIC WinCC Open Architecture enables handling with bigger amounts of data with even smaller hardware solutions. However WinCC OA v3.14 found critical vulnerability. Do you think below detail is the root causes? A remote attackers execute arbitrary code or cause a denial of service (invalid pointer write) via a crafted packet to TCP port 5678.…
-
Security advisories – Drupal Releases Security Update (August 02, 2018)
In a nutshell, a CMS function enables anyone to build a website without a prerequisite requirement. The CMS feature similar like anytime ready to run. In a nutshell, a CMS function enables anyone to build a website without a prerequisite requirement. The CMS feature similar like anytime ready to run. The most popular CMS systems nowadays…
-
Silent security alert – RSA archer (CVE-2018-11059 & CVE-2018-11060)
Archer Technologies provided enterprise governance, risk, and compliance management software. The product aim to reduce enterprise risks, manage and demonstrate compliance, automate business processes, and gain visibility into corporate risk and security controls. Whereby, it integrate with your internal systems equivalent as workflow management especially approval process. REST API relies on a stateless, client-server, cacheable…