SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
SCAP Feed Release : 01-Jun-2017
CVE Research
Putting an End to IT Security Team’s Dilemma: Vulnerability Assessment vs Penetration Testing
Cybersecurity is essential to every enterprise as there is no sign of dipping of security threats. An increase in cybercrimes has led enterprises to implement various methods to prevent them. Even after such implementations, some security threats go undiscovered for months. While IT teams ask themse...
CVE Research
5 Reasons Vulnerability Management Is So Important for SMEs
Across the web, it’s easy to find countless articles on vulnerability management. This is the process of continuous assessment, identification, management, and updating of a business’ cybersecurity practices, and it’s a process that a lot of companies undertake to protect themselves against the evol...
SCAP Feed Release : 01-Oct-2018
SCAP Feed Release : 01-Aug-2018
SCAP Feed Release : 01-Mar-2019
CVE Research
SCAP Feed Release : 01-Mar-2019
The following SCAP content in March 2019 has been released to SCAP Repo and SecPod Saner Solution which contains vulnerabilities like Fedora, Redhat Polkit, NSS vulnerability, etc. SecPod Saner will automatically pull the relevant content on its next scheduled update.
SCAP Feed Release : 01-Jun-2019
CVE Research
Critical Security Vulnerabilities Discovered in JetBrains TeamCity: Urgent Action Required
Recent disclosures have revealed critical vulnerabilities in JetBrains TeamCity. Two vulnerabilities have been identified, namely: CVE-2024-27198 and CVE-2024-27199. It allows unauthenticated attackers to bypass authentication measures and gain unauthorized access to sensitive endpoints within the T...
CVE Research
SolarWinds Fixes Five Potential RCE Vulnerabilities in its Access Rights Manager Solution
Five remote code execution (RCE) vulnerabilities, including three critical severity holes, have been addressed by SolarWinds in its Access Rights Manager (ARM) solution. Three vulnerabilities stand out among the five due to their ability to execute remote code without authentication. These vulnerabi...