SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
What Is The Difference Between Vulnerability Management And Risk-Based Vulnerability Management?
Vulnerabilities are increasing rapidly, and attackers are on the lookout for more sophisticated ways to exploit an attack. To add to this, the security landscape is also changing, continuously adding more burden to the shoulders of security teams. With rising vulnerabilities and evolving security la...
CVE Research
Three More Potential Vulnerabilities Found In SolarWinds Software!
Three new security vulnerabilities have recently been identified in various SolarWinds products. Three of the vulnerabilities are severe, and the most critical of them allows remote code execution with high privileges. A vulnerability management tool discovered these critical vulnerabilities. Martin...
CVE Research
EsteemAudit – Potential for Another WannaCry-like Attacks
There may be a possible ‘second wave’ of massive global cyber attack, as SMB (Server Message Block) . It was not the only network protocol whose zero-day exploits created by NSA exposed in the Shadow Brokers release. A vulnerability management tool helps detecte these attacks. The WannaCry emergency...
CVE Research
Open-Source Vulnerability Scanners: How a Free Tool Carries Hidden Challenges
Over the past 15 years, vulnerability management has evolved from a simple process to a complex business practice. The increasing number of vulnerabilities, rising cyber-attacks, and software vulnerabilities as the leading cause of breaches have highlighted the limitations of open source vulnerabili...
CVE Research
Control+Alt+Defeat Vulnerabilities in 5 mins
The fight against vulnerabilities and threats is constant. The real race is between cyber-attackers and organizations constantly trying to stay ahead. Attackers give their all to penetrate enterprises’ cyber defense while enterprises defend their IT infrastructure.
CVE Research
Exim Mail Server Vulnerability: A Critical Threat Affecting Millions
A critical vulnerability (CVE-2024-39929) in the Exim mail transfer agent could enable attackers to deliver malicious attachments to users’ inboxes. The flaw, rated 9.1 out of 10 on the CVSS scale, affects versions up to 4.97.1 and has been fixed in version 4.98.
Freefloat FTP Server POST Auth Multiple Commands Buffer Overflow Vulnerabilities
CVE Research
Freefloat FTP Server POST Auth Multiple Commands Buffer Overflow Vulnerabilities
SecPod Research Team member (Veerendra G.G) has found multiple Buffer Overflow vulnerabilities in Freefloat FTP Server that mitigated using a vulnerability management tool. The flaws are caused due to input validation errors while processing DELE, MDTM, RETR, RMD, RNFR, RNTO, STOU, STOR, SIZE, APPE,...
