SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Token Based SQLi in FortiWeb: Users Urged to Patch this Critical Flaw
A critical security vulnerability, CVE-2025-25257, has been discovered in FortiWeb web application firewalls, potentially allowing unauthenticated attackers to execute unauthorized SQL commands. This vulnerability, classified as CWE-89 (Improper Neutralization of Special Elements used in an SQL Comm...
CVE Research
Scaling AI Too Fast: The Cybersecurity Blind Spots No One Talks About
Scaling AI across enterprises is moving faster than most security teams can adapt. IBM’s 2025 X-Force Threat Intelligence Index reported an 84% rise in phishing emails delivering infostealers in 2024, often powered by generative AI to mimic human behavior and scale attacks.
CVE Research
Buffer Busted: FortiOS Users Urged to Patch Buffer Overflow Vulnerability
Fortinet disclosed a critical security vulnerability in its FortiOS operating system, which is CVE-2025-24477. The flaw is classified as CWE-122, a heap-based buffer overflow, and affects the cw_stad daemon, a core component responsible for wireless station management. This vulnerability enables exp...
CVE Research
Wing FTP Under Siege: Critical Vulnerability Actively Exploited
A critical vulnerability, CVE-2025-47812, in Wing FTP Server is under active exploitation, allowing unauthenticated remote code execution with root or SYSTEM privileges. This flaw has a CVSS score of 10.0, marking it highly severe.
CVE Research
378 Vulnerabilities Fixed in Oracle’s Latest Critical Patch Update
Oracle’s quarterly critical patch update made its entrance with a bang this April, fixing 378 vulnerabilities in both Oracle and third-party product families. Oracle Communications accounted for the highest number of flaws, totaling 103, with Oracle MySQL and Oracle Communications Applications trail...
CVE Research
NTLM Hijack: DNN Users Urged to Patch Critical Unicode Flaw
DotNetNuke (DNN), a widely used open-source content management system (CMS) built on the .NET framework, has a critical vulnerability. This flaw, CVE-2025-52488, allows attackers to hijack NTLM through a Unicode normalization bypass. This can lead to the theft of sensitive credentials, potentially c...
CVE Research
Surface Protection Fails in the Cloud: Why Deep Workload Defense Is Now Mandatory
Many cloud security tools still focus on scanning images, enforcing perimeter controls, or detecting simple misconfigurations. Attackers bypass these defenses by exploiting deep workload issues — stale dependencies, excessive permissions, or unpatched runtime services. IBM’s XForce Threat Intelligen...
CVE Research
Bypassing Secure Boot: A Linux Initramfs Vulnerability (CVE-2016-4484)
Modern Linux systems implement layers of security, including Secure Boot, full-disk encryption, and bootloader passwords. However, a long-standing vulnerability in the Linux boot process—CVE-2016-4484—exposes a critical gap that allows attackers to bypass these protections by abusing the initramfs (...