-
CVE-2020-7711- Pure Go repositories (goxmidsig) vulnerability – 23-08-2020
Preface: SAML 2.0 implementation for Service Providers based on etree and goxmldsig, a pure Go implementation of XML digital signatures. Background: “nil” in Go that represents zero values for pointers, interfaces, channels, maps, slices and function types. Vulnerability Details: A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be…
-
Remote Access Trojan: BLINDINGCAN – 19th Aug 2020
Preface: The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have identified a malware variant—referred to as BLINDINGCAN—used by North Korean actors. Techincal details: Perhaps the official report already provide the details. In short, the key point is that APT group exploit the Microsoft Word vulnerability (CVE-2017-0199). As such, APT…
-
Do not use insecure deserializer BinaryFormatter – 19th Aug 2020
Preface: SharePoint is a web-based collaborative platform that integrates with Microsoft Office.So called WebParts”gadgets” that provide new functionality when added to a page. Background: On July 14, 2020, Microsoft released a security update to fix the vulnerabilities found in the .NET Framework, Microsoft SharePoint and Visual Studio. A proof of concept shown that attacker can…
-
c-ares 1.16.0 (Use-After-Free) – 9th Aug 2020
Preface: c-ares 1.16.0: ares_destroy() with pending ares_getaddrinfo() leads to use-after-free Background: Google added support for a feature known as asynchronous DNS to Google Chrome, which aims to speed up page loading times by resolving the IP address of a website before you click the link.Recent versions of Google Chrome employ a feature called Async DNS.…
-
DLL Hijacking vulnerability and the Remedy solution – 7th Aug 2020
Preface: Software application could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. Vulnerability details: If workstation install Python, by default it will install on the C Driver :\directory instead of the C Drive:\Program Files. Therefore the…
-
Trojan under the .NET platform remains unchanged for a hundred years (22nd Jul 2020)
Preface: SharePoint will simply not use Framework versions for which they do not apply. For example, SharePoint 2010 uses .NET 2.0. If you install .NET 4, it will remain unused by SharePoint 2010. SharePoint 2019 uses .NET 4.7 and any lower version will simply not be used. Background: Using Microsoft sharepoint as CRM, or external…
-
Windows 10 command “wsreset” co-exists with “mklink” generate a way of User Account Control bypass. (21st JUl 2020)
Preface: UAC bypass has following techniques – using Eventvwr and the Registry Key or using COM Handler Hijack A new way with different technique: WSReset[.]exe open the Windows Store app and clear Windows Store Cache when Windows store cache is damaged or you encounter problems when using Windows Store. If an attacker can create a…
-
Australia (ACSC) urges local citizens to be vigilant against cyber attacks. The so-called copy-paste compromises – 18th June 2020
Preface: Australia’s government and institutions are being targeted by ongoing sophisticated state-based cyber hacks, Prime Minister Scott Morrison says. Mr Morrison did not name specific cases but said it had spanned “government, industry, political organizations, education, health, essential service providers and operators of other critical infrastructure”. 19th June 2020 Technical details: Long story short. The…
-
machine learning vulnerability – vu#425163 (4th Jun 2020)
Preface: Artificial Intelligence applied machine learning and other techniques to solve problems. Will AI impact human? Background: You can use the Machine Learning model to get predictions on new data for which you do not know the target. For instance, AWS developing AI technology to predict cyber attack especially email spam, email phishing , etc.…
-
do you know the weaknesses of IP-in-IP design? 2nd jun 2020.
Background: IPIP tunnel is typically used to connect two internal IPv4 subnets through public IPv4 internet. It has the lowest overhead but can only transmit IPv4 unicast traffic. Vulnerability details: The vulnerability is due to the affected device unexpectedly decapsulating and processing IP in IP packets that are destined to a locally configured IP address.…