Reports-Research - Page 3 of 4 - Safe Security

Reports-Research

Reports-Research HiveNightmare aka Serious SAM [CVE 2021-36934] This paper explains the vulnerability, HiveNightmare (CVE-2021-36934), also known as SeriousSAM, in Windows 10 version 1809 and later. It is a zero-day privilege escalation vulnerability, taking advantage of… Aug 27, 2021 1 min read
Reports-Research Android 11 PIP Vulnerability This paper focuses on the vulnerability found in Android 11 where there is no special permission required to control the minimum allowed window size making it possible for… Aug 18, 2021 1 min read
Reports-Research Detecting and Protecting your Smartphone from Pegasus Spyware Over a few weeks, there has been a hue and cry over the Pegasus spyware targeting various top leaders, human rights activists, media personnel, and other influential personalities… Jul 18, 2021 1 min read
Reports-Research XML External Entity Injection via MP3 File Upload on WordPress XML External Entity injection (XXE) is a vulnerability of the web security domain that allows an attacker to hinder the web application’s XML data processing techniques. A user… Jun 16, 2021 1 min read
Reports-Research Spoofing Downloaded Filename’s Extension in Chromium When there is insufficient data validation in File System API, it allows the attacker to bypass file system restrictions remotely in Windows OS using a crafted HTML page.… Jun 16, 2021 1 min read
Reports-Research Android Vulnerability in ES File Explorer This paper focuses on manual exploitation of ES File explorer vulnerability which works on version v4.1.9.7.4. It allows the attackers on the same network to execute applications, read… Jun 3, 2021 1 min read
Reports-Research Chrome Browser FileReader (UAF) Vulnerability Google published an advisory for a use-after-free in the Chrome implementation of the FileReader API (CVE 2019-5786). The exploit leads to code execution in the Renderer process, and… Jun 3, 2021 1 min read
Reports-Research Heap-Based Overflow Vulnerability in Sudo [CVE-2021-3156] Sudo is a powerful utility that is remembered for most if not all Unix-and Linux-based OSes which allows a permitted user to execute a command as the superuser… Jun 3, 2021 1 min read
Reports-Research Ubuntu OverlayFS Local Privesc Vulnerability The CVE-2021-3493 is an Ubuntu-specific issue in the overlayfs file system in the Linux kernel where there is a lack of proper validation of the application file system… Jun 3, 2021 1 min read
Reports-Research windows-win32k-elevation-of-privilege-vulnerability/ CVE-2021-1732 vulnerability occurs within win32k allowing an attacker to escalate privileges from a normal user to NT AUTHORITY\SYSTEM. This paper will explain where the bug exists which can… Jun 3, 2021 1 min read
Reports-Research A Beginners Guide to Linux Firewall This paper aims to provide detailed insight on how UFW can play an important role for any user to secure their Linux systems. The paper provides all the… Apr 6, 2021 1 min read
Reports-Research Heartbleed Attack – What it is and How Does it Work? This paper aims to provide a detailed study on the Heartbleed attack covering the required topics for understanding the exploit. It is a critical bug in OpenSSL’s implementation… Apr 5, 2021 1 min read