SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
CVE-2014-1761: Zero-day vulnerability in Microsoft Word
A zero-day vulnerability (CVE-2014-1761) in Microsoft Word is being exploited in the wild, which was discovered by the Google security team. A good vulnerability management software can prevent these attacks.
BarracudaDrive Multiple XSS Vulnerabilities
CVE Research
BarracudaDrive Multiple XSS Vulnerabilities
SecPod Research Team member (Shakeel Bhat) has found Multiple Cross-Site Scripting Vulnerability in BarracudaDrive. The vulnerability is caused by improper validation of various parameter in various pages. This may allow an attacker to steal cookie-based authentication credentials, compromise the ap...
CVE-2014-2526: BarracudaDrive Multiple XSS Vulnerabilities
CVE Research
CVE-2014-2526: BarracudaDrive Multiple XSS Vulnerabilities
SecPod Research Team member (Prabhu S Angadi) has found Multiple Cross-Site Scripting Vulnerability in BarracudaDrive. The vulnerability is caused by improper validation of various parameters in various pages. This may allow an attacker to steal cookie-based authentication credentials, compromise th...
CVE Research
CVE-2013-5400: Analysis Of Authentication Bypass Vulnerability in IBM Platform Symphony
IBM Platform Symphony Developer Edition is a free software to develop and test High-performance computing (HPC) and Grid Computing SDK, which pool out your technical computing resources to run big data and/or compute-intensive problems. CVE-2013-5400 is an authentication bypass vulnerability in IBM ...
