SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
SCAP Feed Release : 01-Jun-2018
CVE Research
SCAP Feed Release : 01-Jun-2018
The following SCAP content has been released to SCAP Repo and SecPod Saner Solution. SecPod Saner will automatically pull the relevant content on its next scheduled update. This is a list of vulnerabilities detected using a vulnerability management tool.
CVE Research
Patch Tuesday: Microsoft Security Bulletin Summary for September 2020
Microsoft Patch Tuesday September 2020 has released September Patch Tuesday security updates with a total release of 129 vulnerabilities, In which 23 are classified as Critical with Remote Code Execution(RCE) 105 are classified as important and 1 is classified as moderate that reside in the Microsof...
CVE Research
Mozilla Fixes Two Actively Exploited Zero-Days in Firefox and Thunderbird
Mozilla has released an out-of-band security update for Firefox, Firefox ESR, Firefox Focus, Firefox for Android, and Thunderbird, fixing two critical vulnerabilities (CVE-2022-26485, CVE-2022-26486). Mozilla is aware of the active exploitation of these vulnerabilities. Furthermore, when a patch is ...
CVE Research
5 Things You Didn’t know You Could do in SanerNow
SanerNow can detect and remediate risks and protect your organizations from dangerous cyberattacks using vulnerability management tool. Be it software vulnerabilities or dangerous misconfigurations, SanerNow can easily detect and remediate them. But it can do a lot more than that like auto patching ...
IoT Ransomware Attacks – Next Biggest Challenge For Cyber Warriors – Part 1
CVE Research
IoT Ransomware Attacks – Next Biggest Challenge For Cyber Warriors – Part 1
Ransomware has already managed to carve itself a slot as one of the main cyber security threats in recent years. Individuals, government agencies, and private organizations are each taking precautionary steps to protect against ransomware that can encrypt files beyond one’s reach. IoT ransomware att...
Hillstone Software HS TFTP Server Denial Of Service Vulnerability
CVE Research
Hillstone Software HS TFTP Server Denial Of Service Vulnerability
SecPod Research Team member (Prabhu S Angadi) has found Denial Of Service Vulnerability in Hillstone Software HS TFTP Server. The vulnerability is caused due to improper validation of WRITE/READ Request Parameter containing long file name. The flaw can be exploited to crash the service but can be st...
CVE Research
CVE-2015-2808 : Bar Mitzvah Attack in RC4
Bar Mitzvah Attack, a critical vulnerability discovered in Rivest Cipher 4 software stream cipher. A vulnerability management tool can detect this attack. In cryptography, RC4 is one of the most used software-based stream ciphers in the world. Proper protocols such as Transport Layer Security (TLS) ...