SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Latest Trends in IT Security Software
The worldwide web is arguably the best source of information and opportunities currently. On the other hand, there are countless threats looming at every nook and cranny of the web as well. The truth is that everyone is at risk when going online. This includes private individuals, small businesses, ...
WordPress HTML5 MP3 Player with Playlist plugin XSS and SQL Injection Vulnerabilities
CVE Research
WordPress HTML5 MP3 Player with Playlist plugin XSS and SQL Injection Vulnerabilities
SecPod Research Team member (Thanga Prakash) has found Multiple Cross-site Scripting Vulnerabilities and SQL injection vulnerability in WordPress HTML5 MP3 Player with Playlist plugin. The vulnerability is caused by improper validation of various parameters in various pages. This may allow an attack...
CVE-2014-2526: BarracudaDrive Multiple XSS Vulnerabilities
CVE Research
CVE-2014-2526: BarracudaDrive Multiple XSS Vulnerabilities
SecPod Research Team member (Prabhu S Angadi) has found Multiple Cross-Site Scripting Vulnerability in BarracudaDrive. The vulnerability is caused by improper validation of various parameters in various pages. This may allow an attacker to steal cookie-based authentication credentials, compromise th...
CVE Research
The First Step Towards Endpoint Security Brilliance
This year has forced us into a lot of new challenges in the digital world. During the first half of 2020, Microsoft has seen a 150% increase in vulnerabilities than the entirety of 2019. Security breaches and ransomware attacks are being reported at an alarming rate this year. Cybercriminals now hav...
CVE Research
SMBs – Antivirus Just Not Enough
Small and medium size businesses mainly known as SMBs are focused towards growing. Spending on security software is not one of their priorities. But just like every other business, protection of their data and systems are equally important. The perception that since the business is small all they’ll...
BarracudaDrive Multiple XSS Vulnerabilities
CVE Research
BarracudaDrive Multiple XSS Vulnerabilities
SecPod Research Team member (Shakeel Bhat) has found Multiple Cross-Site Scripting Vulnerability in BarracudaDrive. The vulnerability is caused by improper validation of various parameter in various pages. This may allow an attacker to steal cookie-based authentication credentials, compromise the ap...
CVE Research
Mozilla Patches Zero-Day and High-Severity Vulnerabilities
Mozilla has released three security advisories to address the vulnerabilities present in Firefox, Firefox ESR, and Thunderbird. A zero-day vulnerability (CVE-2020-15999) has also been addressed in the latest version of Firefox. Firefox version 83 also introduces a new “HTTPS-only mode“, if enabled a...
CVE Research
MSSPs Take on Outsourced Security Challenge
The increased cost and complexity of securing the business IT infrastructure has opened the door for managed security service providers (MSSPs). In particular, small and medium businesses (SMBs) generally don’t have the security experience or resources to adequately protect their business from today...