SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Apple Critical Security Updates December 2020
Apple released security updates for multiple products. The exploitation of some of these security flaws will allow an attacker to crash the application or potentially control affected systems. However, a patch management solution can stop the exploitation.
CVE Research
Critical Zero-Day in HPE Systems Insight Manager Revealed
Hewlett Packard Enterprise recently revealed a security flaw in its Systems Insight Manager software (Vulnerability in HPE Systems). This zero-day bug resides in the recent versions of the server software and is reportedly unpatched. Servers running the affected software are liable to Remote Code Ex...
CVE Research
Adobe Fixes Critical Zero-Day Flaw Actively Exploited in the Wild – Security Updates February 2021
Adobe Security updates February 2021 released security updates providing fixes for 33 critical vulnerabilities in Adobe Magento, Adobe Acrobat, Reader, Photoshop, Animate, Illustrator, and Dreamweaver. A total of 50 security vulnerabilities are patched in this release. The patched vulnerabilities ar...
CVE Research
Adobe Critical Security Updates June 2021
Adobe has finally released security updates providing fixes for 21 critical vulnerabilities in Adobe Creative Cloud Desktop Application, After Effects, Photoshop, Animate, RoboHelp Server, Acrobat, and Reader. A total of 41 security vulnerabilities have been finally patched in this release. Having a...
Adobe Security Updates for May 2017
CVE Research
Adobe Security Updates for May 2017
Adobe Security Updates May 2017 has released two security updates for Adobe Flash Player, and Adobe Experience Manager Forms using a reliable vulnerability management tool. The updates address a critical vulnerability in Adobe Flash Player and an important vulnerability in Adobe Experience Manager F...
CVE Research
Patch Tuesday: Microsoft Security Updates for May 2021.
Microsoft has released May 2021 Patch Tuesday security updates with a total of 55 vulnerabilities in the family of Windows and Mac operating systems and related products. In the release by Microsoft, 4 vulnerabilities were rated as Critical, 50 as Important, and 1 as Moderate. Therefore, a good vuln...
CVE Research
Adobe Releases Critical Security Updates for Magento
As part of its August 2021 Patch Tuesday, Adobe has rolled out fixes for its e-commerce platform, Magento. These updates address 26 vulnerabilities, 20 of which have been rated as critical. On successful exploitation, most of these vulnerabilities could lead to arbitrary code execution. Apart from M...
CVE Research
False Positives and the story of Rob’s failed Vulnerability Management Program
Like most security admins, Rob is always on his toes to protect the digital infrastructure of his organization from bad actors. Rob, aka Robbie, that’s what his colleagues and employers used to call him, relied on a static vulnerability management program and went ahead with a 14-day free trial. For...