Preface: Sandbox evasion techniques. Common evasion techniques include the use of specific assembly instructions, and looking for specific registry keys or file names. Background: iOS and iPadOS help ensure runtime security by using a “sandbox,” declared entitlements, and Address Space Layout Randomization (ASLR).All third-party apps are “sandboxed,” so they are restricted from accessing files stored…

Preface: When using the U-Boot UEFI implementation to boot the operating system the UEFI runtime stays in memory. Use-After-Free (UAF) is a vulnerability related to incorrect use of dynamic memory during program operation. If after freeing a memory location, a program does not clear the pointer to that memory, an attacker can use the error…

Preface: Back to forty years ago, computer trend in mainstream is command mode. When Microsoft windows GUI born, people favour Windows OS. As time goes by, because of Microsoft system vulnerability, people said I like Linux. As of today, from time-to-time you will heard Linux Kernel vulnerability occurs. Can you change to Microsoft windows now?…

Preface: Fundamentally, so called software application system is integrated with operating system, web server/server, database and application software program. If software application program design have relationship with web server bundle application framework. Such impact not only affect a single component. Background: VMware Carbon Black Cloud Endpoint™ Standard is a next-generation antivirus (NGAV) and endpoint detection…

Preface: Two different methods and names, but similar in function.AMD CPUs with four cores use simultaneous multithreading to provide eight threads, and most Intel CPUs with two cores use hyper-threading to provide four threads. Background: In IBM S390 system configuration. Use the smt= and nosmt kernel parameters to control multithreading.By default, Linux in LPAR mode…

Preface: iOS 16 is the sixteenth and current major release of the iOS mobile operating system developed by Apple for its iPhone line of products. It was announced at the company’s Worldwide Developers Conference (WWDC) on June 6, 2022, as the successor to iOS 15. Background: Use-after-free is still a common bug class because the…

Preface: It was the periodically recurring SAP Security Note #2622660 which patches the latest Chromium vulnerabilities for SAP Business Client. Background: Difference between SAP NWBC and SAP GUI?Web Dynpro is the SAP NetWeaver programming model for user interfaces (UIs).– Using SAP GUI, when you execute WD (Web Dynpro) application, it opens in a browser. -The…

Preface: When an Android application needs to access sensitive resources on the device, whether it hit design weakness lead to vulnerability occurs. Background: Usually, if we want to add some user permissions, we write the following code in the AndroidManifest[.]xml file: The android system grants these permissions at the installation time but there is one…

Preface: .NET is a free, cross-platform, open source developer platform for building many different types of applications. With .NET, you can use multiple languages, editors, and libraries to build web, mobile, desktop, games, IoT, and more. Background: The demand for .NET will continue to increase as long as new and better technologies are developed.NET 6…