SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Google Discloses Windows Zero-Day Vulnerability Being Exploited in the Wild
Google Project Zero disclosed details for a zero-day vulnerability CVE-2020-17087 found in the Windows operating system that being currently exploited in the wild. A vulnerability management tool discovered this.
CVE Research
Double Free Vulnerability Basics Explained
One of the most common memory corruption errors usually found in an application is the “Double Free” error. Double-free vulnerability is caused by freeing the same memory location twice by calling free() on the same allocated memory. However, this vulnerability detection can be simple using a vulner...
CVE Research
Basic Malware Analysis
Any program intended to disrupt computer or network operation, gather sensitive information, or gain access to private computer systems or networks is malware. Virus, Spyware, Worm, Adware, Trojan horse, Rootkit, Scareware are all examples of malware. Malware analysis is an art of dissecting the mal...
CUPS IPP Use-After-Free Denial of Service Vulnerability Proof of Concept [CVE-2010-2941]
CVE Research
CUPS IPP Use-After-Free Denial of Service Vulnerability Proof of Concept [CVE-2010-2941]
Fellas, SecPod Research Team member “Veerendra GG” has written a valid working POC to crash CUPS Service. The POC is written based on the information provided in RedHat Bugzilla (CVE-2010-2941) which sends a malformed IPP (Internet Printing Protocol) packets over TCP. For more information on this vu...
FREAK creeps into Windows
CVE Research
FREAK creeps into Windows
In our previous blog post, we promised to keep you informed if FREAK (Factoring attack on RSA-EXPORT Keys) vulnerability affects Windows applications. As of today, it is confirmed that FREAK is affecting all supported versions of Microsoft Windows, making the flaw more dangerous than anticipated. Th...
CVE Research
Hunting the Egg: Egg Hunter
A bit of a background on buffer overflow to begin with. A buffer overflow occurs when a program tries to write more data into a buffer than it can. This makes it overrun and writes data in an unallocated memory location. If we carefully craft the data, we can control the flow of execution and then d...