-
SAP completes the remediation – Let’s review the flaw – CVE-2020-6286
Preface: Path traversal vulnerability perhaps will be ignore by some people. But this design weakness similar provide a channel to attacker conduct a search. The vulnerability described in SAP security notes 2934135 contains with two different vulnerabilities. Background: SAP NetWeaver is a software stack for many of SAP SE’s applications.It can be used for custom…
-
Cyber security Focus – IE Scripting Engine Memory Corruption Vulnerability (11th Aug 2020)
Preface: In Windows 10, there are two ways to uninstall Internet Explorer. Option 1:Turn Windows features on or off optionOption 2: Disable IE11 using PowerShell commands Open PowerShell and Run as administrator. Execute the following command:Disable-WindowsOptionalFeature -FeatureName Internet-Explorer-Optional-amd64 –Online Security Focus: CVE-2020-1380 – Scripting Engine Memory Corruption Vulnerability Even you turn off the Internet Explorer,…
-
CVE-2020-5413: vmware (kryo_codec) – Deserialization of Untrusted Data (Aug 2020)
Preface: Serialization in Java is a mechanism of writing the state of an object into a byte-stream. It is mainly used in Hibernate, RMI, JPA, EJB and JMS technologies. The reverse operation of serialization is called deserialization where byte-stream is converted into an object. Product background: Spring Integration framework provides Kryo Codec implementations as an…
-
c-ares 1.16.0 (Use-After-Free) – 9th Aug 2020
Preface: c-ares 1.16.0: ares_destroy() with pending ares_getaddrinfo() leads to use-after-free Background: Google added support for a feature known as asynchronous DNS to Google Chrome, which aims to speed up page loading times by resolving the IP address of a website before you click the link.Recent versions of Google Chrome employ a feature called Async DNS.…
-
DLL Hijacking vulnerability and the Remedy solution – 7th Aug 2020
Preface: Software application could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. Vulnerability details: If workstation install Python, by default it will install on the C Driver :\directory instead of the C Drive:\Program Files. Therefore the…
-
Operation technology environment – Staying Alert! (CVE-2020-15492)
Preface: Computer technology enlightens the automation industry. Due to modern CNC (Computer Numeric Control) technology, tiny parts are easy to produce. Who is the hero of this industry? I believe it is CAD technology. Background: CAD administrators use INNEO “Startup TOOLS” to manage working environments including licenses and standardized library elements and maintain their correct…
-
Express-fileupload module design weakness (CVE-2020-7699) – 4th Aug 2020
Preface: A large number of mobile apps and websites allow users to upload profile pictures and other files. Therefore, handling files upload is a common requirement while building a REST API with Node.js & Express (Express-fileupload). Express-fileupload is a middleware. Technical background: How express-fileupload works? It makes the uploaded files accessible from req[.]files property. For…
-
Currently, only a few antivirus vendors can successfully detect it. Preventive control should be apply. (03-08-2020)
Preface: In 2017, Honeypot detected that malware spread a new payload targeting 60001 TCP port. The ultimate goal is the JAWS Web Server & MVPower DVR. It turns out that there will be a Shell Command Execution vulnerability. Security expert has doubt on IoT device especially DVR which make use of TCP 60001 port. Observation:…
-
Umbraco cms 7.12.4 RCE vulnerability overview (3rd Aug 2020)
Preface: When we read the vulnerability article, we will despise those vulnerabilities that require authentication to execute. However, this type of design flaw should be considered because it is not limited to the inside threat area. Background: Umbraco is the #1 Microsoft open source CMS in the worldPopular Sites Using Umbraco, For example: Instagram,slideshare,flickr,zippyshare,cnblogs,wattpad,…etc. Technical…
-
Staying Alert! GRUB2 bootloader design weakness – 31st Jul, 2020.
Preface: From some perspectives, the operating system and related components are designed to provide functionality. Therefore, network security does not involve its design scope. Even if network security has been included in their design. However, product technology changes with each passing day. Therefore, we often hear information about vulnerabilities. Why do I need a system…