SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Vulnerability Management Plans to Build Unbreachable Defense
Do you worry about the security of your organization? Do you think it is too difficult to create and implement the right vulnerability management plan that ticks all the right boxes by using the right vulnerability management tool?
CVE Research
How to Install Windows Softwares on Linux
There are times when we need to run some Windows applications (.exe, .msi) on Linux. This objective can be achieved with the help of wine. However, while installing, we need to make sure the system is safe by using a vulnerability management solution.
CVE Research
Advanced Power Botnet: Innovative Approach to find Security Vulnerabilities
A new kind of botnet in cyber security has been uncovered which takes an innovative approach to find security vulnerabilities in the website using systems installed with illegitimate Mozilla Firefox add-on. An investigation by KrebsOnSecurity has revealed. Using a vulnerability management solution.
NetArt Media Pharmacy System SQL Injection and Cross-site Scripting Vulnerabilities
CVE Research
NetArt Media Pharmacy System SQL Injection and Cross-site Scripting Vulnerabilities
SecPod Research Team member (Antu Sanadi) has found Cross-Site Scripting and SQL Injection Vulnerabilities in NetArt Media Pharmacy System. The vulnerability is caused by improper validation of various parameters in multiple pages. This may allow an attacker to steal cookie-based authentication cred...
NetArt Media iBoutique SQL Injection Vulnerability
CVE Research
NetArt Media iBoutique SQL Injection Vulnerability
SecPod Research Team member (Antu Sanadi) has found an SQL Injection Vulnerabilities in NetArt Media iBoutique. The vulnerability is caused by improper validation of ‘key’ parameter in ‘/index.php’. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
Netmechanica NetDecision HTTP Server Denial Of Service Vulnerability
CVE Research
Netmechanica NetDecision HTTP Server Denial Of Service Vulnerability
SecPod Research Team member (Prabhu S Angadi) has found Denial Of Service Vulnerability in Netmechanica NetDecision HTTP Server. The vulnerability is caused due to improper validation of long malicious HTTP request to web server, which allows remote attackers to crash the service.
Apache Struts Multiple Persistence Cross-Site Scripting Vulnerabilities
CVE Research
Apache Struts Multiple Persistence Cross-Site Scripting Vulnerabilities
SecPod Research Team member (Antu Sanadi) has found Multiple Persistence Cross-Site Scripting in Apache Struts Vulnerabilities. The vulnerability is caused by improper validation of various parameters in multiple pages. This may allow an attacker to steal cookie-based authentication credentials or i...
NetSarang Xlpd Printer Daemon Denial of Service Vulnerability
CVE Research
NetSarang Xlpd Printer Daemon Denial of Service Vulnerability
SecPod Research Team member (Prabhu S Angadi) has found Denial of Service Vulnerability in NetSarang Xlpd Printer Daemon. The vulnerability is caused due to improper validation of malicious LPD request sent to printer daemon. The flaw can be exploited to crash the service.