SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
WordPress Plugin Contact Form 7 Critical File Upload Vulnerability (CVE-2020-35489)
Contact Form 7 is a popular WordPress plugin that is used to create, customize, and manage multiple contact forms on WordPress sites. A critical file upload vulnerability (CVE-2020-35489) has an identity in the WordPress Contact Form 7 plugin, allowing an attacker to execute arbitrary code on affect...
CVE Research
Apple’s June 2023 Updates Addresses Multiple Security Vulnerabilities And 3 Zero-Days!
Apples Security Alert June 2023 recently released multiple updates to patch various Apple products affected by multiple vulnerabilities. A total of three vulnerabilities were fixed in nine of its products on June 21st. An attacker who successfully exploits these flaws could therefore compromise the ...
CVE Research
Cisco AnyConnect Vulnerabilities are Being Exploited in the Wild!
Cisco AnyConnect Secure Mobility Client allows users to connect to remote systems through a VPN. On October 26, 2022, Cisco issued a warning to its customers, stating that security vulnerabilities in the Cisco AnyConnect Secure Mobility Client for Windows, which are two years old, are currently bein...
CVE Research
Oracle WebLogic Server Under Active Exploitation (CVE-2020-14882)
Critical Remote Code Execution (RCE) vulnerability CVE-2020-14882 in the console component of the Oracle WebLogic Server Exploitation allows unauthenticated, remote attackers to execute commands on the affected servers. Oracle has assigned this vulnerability a CVSSv3 score of 9.8 out of 10, clearly ...
CVE Research
Dirty COW Vulnerability (Kernel Local Privilege Escalation)
Dirty COW vulnerability(CVE-2016-5195) is a privilege escalation in the Linux Kernel, which allows an unprivileged local user to gain write access to otherwise read-only memory mappings. Thus increases their privileges on the system. Vulnerability management tool are essential to detect such critica...
CVE Research
SMBLoris – An SMB DoS Vulnerability
SMBLoris is a remote, unauthenticated application-level denial of service (DoS) attack against Microsoft Windows operating systems. A vulnerability of this kind can be tracked using an appropriate vulnerability management tool. The Server Message Block (SMB) network protocol implementation causes it...
CVE Research
The Ultimate Patch Management Checklist to Evaluate the Success of Your Patching Program!
Vulnerabilities are growing exponentially, and it strains IT security admins to remediate them and protect the organization from cyberattacks. Patch management is a daunting and time-consuming task, yet the impact of not patching is devastating! According to a study, 57% of data breaches are attribu...