SecPod

Learn Search

Search across all Learn content

SecPod Labs

Security Research

In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.

Open Lemon Duck Malware : Infecting outdated Windows systems using EternalBlue
Lemon Duck Malware : Infecting outdated Windows systems using EternalBlue

CVE Research

Lemon Duck Malware : Infecting outdated Windows systems using EternalBlue

Apr 30, 2026 • 4 min read

Open Gaining Root Shell in Linux (CVE-2016-4484)
Gaining Root Shell in Linux (CVE-2016-4484)

CVE Research

Gaining Root Shell in Linux (CVE-2016-4484)

Linux distributions are one of the most popular and commonly used operating systems. All Linux distributions including Debian, Ubuntu, Fedora, Red Hat Enterprise Linux (RHEL), and SUSE Linux Enterprise Server (SLES) suffer from a serious authentication bypass vulnerability that can allow anyone to b...

Apr 30, 2026 • 4 min read

Open Polarbear digs out a new Windows Zero-Day
Polarbear digs out a new Windows Zero-Day

CVE Research

Polarbear digs out a new Windows Zero-Day

Apr 30, 2026 • 4 min read

Open VMware addresses three critical flaws in Workspace ONE!
VMware addresses three critical flaws in Workspace ONE!

CVE Research

VMware addresses three critical flaws in Workspace ONE!

VMware has recently released patches to three critical severity vulnerabilities affecting the Workspace ONE assist solution. A good vulnerability management tool can solve these problems.

Apr 30, 2026 • 2 min read

Open Trend Micro Antivirus Products Exploited Wildly
Trend Micro Antivirus Products Exploited Wildly

CVE Research

Trend Micro Antivirus Products Exploited Wildly

A threat actor is actively exploiting a bug currently in Trend Micro’s security products to do privilege escalation on Windows systems. The vulnerability is tracked as CVE-2020-24557 and is affecting two major security products of the company – Apex One and OfficeScan. A good Vulnerability managemen...

Apr 30, 2026 • 2 min read

Open Oracle Emergency Fix for Critical RCE Flaw in WebLogic Server
Oracle Emergency Fix for Critical RCE Flaw in WebLogic Server

CVE Research

Oracle Emergency Fix for Critical RCE Flaw in WebLogic Server

Oracle has addressed a critical Remote Code Execution (RCE) vulnerability in the rare out-of-band patch in numerous versions of Oracle WebLogic Server. The vulnerability is assigned CVE-2020-14750, which has a CVSS base score of 9.8 out of 10 and is remotely exploitable without authentication or use...

Apr 30, 2026 • 2 min read

Open ALERT: ProFTPD Server Arbitrary File Copy Vulnerability (CVE-2019-12815)
ALERT: ProFTPD Server Arbitrary File Copy Vulnerability (CVE-2019-12815)

CVE Research

ALERT: ProFTPD Server Arbitrary File Copy Vulnerability (CVE-2019-12815)

Apr 30, 2026 • 2 min read

Open MS Office Default Function Bring In Self-Replicating Malware
MS Office Default Function Bring In Self-Replicating Malware

CVE Research

MS Office Default Function Bring In Self-Replicating Malware

Apr 30, 2026 • 4 min read

Open Apple Addresses Two Wildly Exploited Zero-Day Vulnerabilities!
Apple Addresses Two Wildly Exploited Zero-Day Vulnerabilities!

CVE Research

Apple Addresses Two Wildly Exploited Zero-Day Vulnerabilities!

Apr 30, 2026 • 2 min read