SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Git Wrecked: GitLab Users Urged to Patch Critical Security Flaws
GitLab has released patches to address nine vulnerabilities affecting various installations of the Community Edition (CE) and Enterprise Edition (EE). Two of these have been classified as critical and are tracked as CVE-2025-25291 and CVE-2025-25292, each with a CVSS score of 8.8. These vulnerabilit...
CVE Research
Cloud Security Best Practices That Every User Should Implement
The cloud has become a foundational element of modern business operations due to its far-reaching scalability, adaptability, and cost-effectiveness. However, as more companies adopt cloud computing, they should also implement cloud security best practices to avoid the increasing dangers of modern cy...
CVE Research
Critical GitLab Pipeline Execution Vulnerability (CVE-2024-6678)
Recently, GitLab issued an urgent security advisory regarding a critical vulnerability, CVE-2024-6678, which impacts both GitLab Community Edition (CE) and Enterprise Edition (EE). This flaw, with a CVSS score of 9.9, allows attackers to execute pipeline jobs as arbitrary users, potentially leading ...
CVE Research
New OpenSSH Vulnerabilities: MITM and DoS Threats Uncovered. Patch Now!
OpenSSH has once again found itself in the security spotlight. Just seven months after discovering the regreSSHion flaw, two new critical flaws have come to light. This time, the risks stem from Man-in-the-Middle (MITM) and Denial-of-Service (DoS) vulnerabilities—each with the potential to disrupt o...
CVE Research
New Feature Update: Service Level Agreement (SLA)
Imagine this: you’re the head of IT security at an organization, and every day, new vulnerabilities pop up across your network. Some are minor; others are major risks to your company’s infrastructure. While you know you need to act fast, the question is: which vulnerabilities should be addressed fir...
CVE Research
Vulnerability Management & Cybersecurity Trends to Look For in 2025
Phew. What a year 2024 was. High-profile attacks, rapid digital transformation, and the elephant in the room, AI, of course. These events have changed the cybersecurity world and will have longstanding ramifications! But what about cybersecurity trends in 2025?
CVE Research
A Thorn in your Security: RCE Flaws discovered in Cacti
Cacti is an open-source network monitoring and graphing tool that helps visualize and track network performance, server health, and device availability. It leverages Round Robin Database Tool (RRD Tool) to store data and generate real-time graphs, making it popular for IT infrastructure monitoring.
CVE Research
Tunnel Trouble: 4.2 Million Hosts, VPNs, and Routers Vulnerable
“Attackers? Good luck getting past my VPN wall!”. Maybe it’s time to reconsider that. New research just uncovered security vulnerabilities in multiple tunneling protocols that could allow attackers to perform a wide range of attacks in your “private” network.
CVE Research
Urgent: Patch Now! Critical Zero-Day CVE-2025-23006 Targets SonicWall SMA Appliances
CVE-2025-23006 is a critical zero-day vulnerability affecting SonicWall Secure Mobile Access (SMA) 1000 series appliances. This vulnerability, categorized as a deserialization of untrusted data flaws, resides within the Appliance Management Console (AMC) and Central Management Console (CMC). Exploit...