SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Hunting the Egg: Egg Hunter
A bit of a background on buffer overflow to begin with. A buffer overflow occurs when a program tries to write more data into a buffer than it can. This makes it overrun and writes data in an unallocated memory location. If we carefully craft the data, we can control the flow of execution and then d...
CVE Research
Vulnerability 2.0: Redefining Vulnerabilities
The security team members at ACME were scurrying around the office. The CISO was blasting orders, and the sysadmins were trying to follow it. The aftermath of a cyber-attack had left them all speechless, stressed, and overworked. Unlike typical malware/ransomware, the attack occurred from a simple-y...
CVE Research
Zyxel Users Beware: Critical OS Command Injection Flaw Threatens Routers
Zyxel, a communications company, has released an advisory warning users of a critical input validation vulnerability impacting many of its router models. CVE-2024-7261, with a CVSS score of 9.8, could potentially allow unauthenticated attackers to perform OS command injection.
CVE Research
Risk vs. Vulnerability Assessment: Should we Compare Them?
With so much information/ data stored digitally or on the cloud, the risk it poses is unavoidable. Cyberattacks are rising, and attackers are getting sophisticated while planning an attack. The first step you take to overcome these attacks is to implement a strategy for risk reduction.
CVE Research
Badlock : A Critical Samba Vulnerability
A critical vulnerability found in Samba which affects all Windows platforms, termed as badlock. It will be patched on April 12, 2016. This is called samba badlock vulnerability. A vulnerability management tool can mitigate this vulnerability.
CVE Research
Safeguarding the Factory Floor: “Cybersecurity in Manufacturing”
The world of manufacturing has always been about precision, efficiency, and innovation. But today, there’s a new element to consider “cybersecurity”. Manufacturing isn’t just about machines and assembly lines anymore, it’s also about protecting valuable digital assets from vulnerabilities. Cyber-cri...
