SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Alert! Zerologon: Your Windows Domain Controller Can’t Handle Zero Properly (CVE-2020-1472)
Microsoft team patched a critical and exciting vulnerability in the Netlogon Remote Protocol of the Windows server last month. zero logon vulnerability discovered by the Cybersecurity firm Secura (dubbed as Zerologon), has received the highest severity score of 10.0. The vulnerability is identified ...
CVE Research
Sophos UTM Creating a ‘Big’ Bounty with Remote Code Execution Flaw
A critical and high severity remote code execution vulnerability CVE-2020-25223 with CVSS 3. x severe base score 9.8 is present in Sophos SG UTM. Sophos reported this vulnerability on September 18, 2020, in their Advisory. A reliable vulnerability management tool can help to combat these vulnerabil...
CVE Research
A Critical Vulnerability ‘SMBleed’ Impacts Windows SMB Protocol
The Server Message Block Protocol (SMB protocol), which runs over TCP port 445, is a client-server communication protocol for sharing access to files, printers, network browsing, and inter-process communication.
CVE Research
Critical Command Injection Vulnerabilities in D-Link DSR VPN Routers
Multiple critical command injection vulnerabilities have identified in the D-Link DSR VPN router family products. These vulnerabilities are identified with CVE-2020-25757, CVE-2020-25759, CVE-2020-25758 and can allow an attacker to gain complete root access to the affected device. Vulnerability mana...
CVE Research
Kaseya’s Virtual System/Server Administrator (VSA) Zero-Day Under Active Exploitation By REvil Ransomware
Kaseya is a US-based organization that provides IT and security management solutions for managed service providers (MSPs) and small to medium-sized businesses (SMBs) worldwide. One of its tools, called Kaseya’s VSA, is under active exploitation and used as an attack vector to install REvil ransomwar...
CVE Research
How Fast, Accurate, and Continuous are your Vulnerability Scans?
With time, cybercriminals have begun employing sophisticated mediums to unleash chaos and vulnerabilities digitally. Vulnerabilities are becoming the most common and significant cause of many cyberattacks today. Managing them and preventing vulnerability exploits have become the most critical tasks ...
CVE Research
Microsoft Released Emergency Out-Of-Band Updates To Fix Windows Server Authentication Issues
After the November patch Tuesday, Microsoft released emergency Out-Of-Band update to address authentication failures related to Kerberos delegation scenarios impacting Domain Controllers (DC). Firstly, these authentication issues impact systems that are running Windows Server 2019 and lower versions...
CVE Research
Atlassian Confluence Server and Data Center Zero Day Vulnerability Under Active Exploitation. Patch Now!
OGNL Injection Vulnerability was discovered in Atlassian Confluence Server and Data Center, and it is tracked with CVE-2022-26134. This Atlassian Zero-Day vulnerability is actively exploited in the wild. Confluence is a wiki-based collaboration platform that enables teams to interact and share infor...
CVE Research
Microsoft January 2022 Patch Tuesday Addresses 97 Vulnerabilities Including Six Zero-Day
Microsoft’s January 2022 Patch Tuesday security patch includes a total of 97 vulnerabilities detected, including six zero-day with nine classified as Critical and then 88 as Important. Furthermore, the products covered in January’s security update include Microsoft Office, Microsoft Windows, Microso...