SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Adobe Critical Security Updates September 2021
Adobe Critical Security Updates September 2021 fixes for 34 critical vulnerabilities in Adobe Acrobat and Reader, Premiere Pro, InCopy, etc. Moreover, a total of 52 security vulnerabilities have been patched in this release. Most of these vulnerabilities could lead to arbitrary code execution on suc...
CVE Research
6 Common Myths And Misbeliefs About Patching
Patching is one of the best security practices followed to fix software vulnerabilities. Studies show that much serious ransomware like WannaCry could have been easily prevented if software updates were patched on time. For cyber attackers, un-updated software is always a welcome sign to intrude the...
CVE Research
Microsoft’s November 2023 Patch Tuesday Fixes 75 Vulnerabilities, Including 5 Zero Days
This Patch Tuesday November 2023, Microsoft fixed 75 vulnerabilities, with three rated as critical and 57 rated as important. Elevation of Privilege and Remote Code Execution vulnerabilities are tied for the most common categories at 17 each, with one in each category being critical. The third criti...
CVE Research
Critical RCE Flaw Discovered In Confluence: CVE-2023-22522
A new remote code execution vulnerability has been found in Confluence Data Center and Server. CVE-2023-22522, exploited using template injection, allows authenticated attackers (including those with anonymous access) to inject malicious user input into Confluence pages. What’s more, this vulnerabil...
Avaya IP Office Manager TFTP Server Directory Traversal Vulnerability
CVE Research
Avaya IP Office Manager TFTP Server Directory Traversal Vulnerability
SecPod Research Team member (Veerendra G.G) has found a Directory Traversal Vulnerability in Avaya IP Office Manager TFTP Server. The vulnerability is caused due to improper validation of TFTP READ requests containing ‘../’ sequences, which allows attackers to read arbitrary files via directory trav...