SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
CVE-2016-0728 – Linux Kernel Flaw
CVE-2016-0728 is the latest zero-day flaw in the Linux kernel which affects millions of users across the world. The Linux Kernel vulnerability is there for several years and discovered only recently. This flaw exists in all the Linux kernel versions 3.8 and later. CVE-2016-0728 is basically a memory...
CVE Research
Google Chrome Rolls out an Emergency Security Patch for a High Severity Zero-day Flaw!
Google has recently released an emergency security fix to patch a Zero-Day vulnerability CVE-2022-3723. This vulnerability was in the Chrome browser application. Although the previous security patch was present on Tuesday (October 25th), this patch is within a gap of two days, i.e., on Thursday (Oct...
CVE Research
Defeat CryptoLocker Ransomware: Make sure your Data is not taken Hostage
One of the major and serious threats on the internet today is malicious software, often called Malware. Malware, a short form of malicious software, is any software that disrupts computer operations, gathers sensitive information, gains access to private computer systems, or displays irrelevant adve...
CVE Research
How frequent will Ransomware attacks be in 2022?
Ransomware has made its way into the consciousness of business owners and security admins over the past two years. As an increasingly prevalent cyberattack, ransomware has grabbed more headlines than any other cyberattack in 2021. According to a recent study by Cybersecurity Ventures, in every 11 se...
CVE Research
Critical Code Execution Vulnerability in Adobe ColdFusion
Adobe has released a critical security update that impacted Adobe ColdFusion and is assigned with a priority rating of 2. The Adobe Coldfusion Exploit found in the product affects ColdFusion versions 2016, 2018, and 2021 that would lead to arbitrary code execution. Using a patch management tool can ...
CVE Research
SanerNow’s Role in Strengthening Compliance Posture
Millions of people are robbed of personal data like their credentials, social security numbers, bank account-credit card details, among others, on social media. These can be stopped by using a vulnerability management tool. Cybercriminals are engaged in their thieving escapade to impersonate people ...
CVE Research
5 Questions to Ask While Choosing a Network Vulnerability Scanner
The CISO and the sysadmin at the_Teckies were desperately looking for a network vulnerability scanner. Talks of a dangerous misconfiguration in JIRA were in the news, and it seemed to have escaped from their existing scanner. It is essential to have a vulnerability management software.
CVE Research
Critical Remote Code Execution Vulnerabilities in MyBB Forum Software
Two critical vulnerabilities have been found in popular bulletin board software called MyBB. The vulnerabilities can be chained together to get remote code execution without prior access to a privileged account. The independent security researchers Simon Scannell and Carl Smith found the flaws. They...