SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Most Painful Products that Keep IT Security Admins Up on their Toes
There will always be an IT admin team that consistently remediates vulnerabilities due to the possibility of security threats. The higher the number of vulnerabilities in an application, the greater the likelihood of security threats. And businesses need to remediate those vulnerabilities with a vul...
Metasploit Module: Fitnesse Wiki Remote Command Execution
CVE Research
Microsoft August 2021 Patch Tuesday Addresses 44 CVEs, Including Three Zero-Days
Microsoft has released August Patch Tuesday security updates with a total of 44 vulnerabilities in the family of Windows and Mac operating systems and related products. In the release by Microsoft, 7 were rated as Critical and 37 as Important. Hence, the products covered in August’s security update ...
CVE Research
Apple Has Addressed A Zero-Day Vulnerability Which Is Being Actively Exploited In The Wild
This year, Apple released security updates for their third zero-day vulnerability. Apple addresses a zero-day vulnerability in its Feb 2022 update. However, the affected software processes maliciously crafted web content, leading to arbitrary code execution in WebKit, which is a component included i...
CVE Research
High-Severity Remote Code Execution Vulnerability in Google Chrome
A high-severity ‘use-after-free vulnerability tracked as CVE-2020-6492 with a CVSSv3 base score of 8.3 exists in WebGL [Web Graphics Library] component of the Google Chrome web browser that could be used to execute arbitrary code in the context of the browser process.
CVE Research
SolarWinds Releases Updates to Address Vulnerability Exploited by SUPERNOVA Malware
SolarWinds has released an advisory on 27th December 2020 to address the vulnerability being exploited by SUPERNOVA malware. The vulnerability resides in the SolarWinds Orion API, making it vulnerable to an authentication bypass that can further lead to remote code execution. The vulnerability has b...