Reports-Research
Reports-Research
HiveNightmare aka Serious SAM [CVE 2021-36934]
This paper explains the vulnerability, HiveNightmare (CVE-2021-36934), also known as SeriousSAM, in Windows 10 version 1809 and later. It is a zero-day privilege escalation vulnerability, taking advantage of…
Reports-Research
Android 11 PIP Vulnerability
This paper focuses on the vulnerability found in Android 11 where there is no special permission required to control the minimum allowed window size making it possible for…
Reports-Research
Detecting and Protecting your Smartphone from Pegasus Spyware
Over a few weeks, there has been a hue and cry over the Pegasus spyware targeting various top leaders, human rights activists, media personnel, and other influential personalities…
Reports-Research
XML External Entity Injection via MP3 File Upload on WordPress
XML External Entity injection (XXE) is a vulnerability of the web security domain that allows an attacker to hinder the web application’s XML data processing techniques. A user…
Reports-Research
Spoofing Downloaded Filename’s Extension in Chromium
When there is insufficient data validation in File System API, it allows the attacker to bypass file system restrictions remotely in Windows OS using a crafted HTML page.…
Reports-Research
Android Vulnerability in ES File Explorer
This paper focuses on manual exploitation of ES File explorer vulnerability which works on version v4.1.9.7.4. It allows the attackers on the same network to execute applications, read…
Reports-Research
Chrome Browser FileReader (UAF) Vulnerability
Google published an advisory for a use-after-free in the Chrome implementation of the FileReader API (CVE 2019-5786). The exploit leads to code execution in the Renderer process, and…
Reports-Research
Heap-Based Overflow Vulnerability in Sudo [CVE-2021-3156]
Sudo is a powerful utility that is remembered for most if not all Unix-and Linux-based OSes which allows a permitted user to execute a command as the superuser…
Reports-Research
Ubuntu OverlayFS Local Privesc Vulnerability
The CVE-2021-3493 is an Ubuntu-specific issue in the overlayfs file system in the Linux kernel where there is a lack of proper validation of the application file system…
Reports-Research
windows-win32k-elevation-of-privilege-vulnerability/
CVE-2021-1732 vulnerability occurs within win32k allowing an attacker to escalate privileges from a normal user to NT AUTHORITY\SYSTEM. This paper will explain where the bug exists which can…
Reports-Research
A Beginners Guide to Linux Firewall
This paper aims to provide detailed insight on how UFW can play an important role for any user to secure their Linux systems. The paper provides all the…
Reports-Research
Heartbleed Attack – What it is and How Does it Work?
This paper aims to provide a detailed study on the Heartbleed attack covering the required topics for understanding the exploit. It is a critical bug in OpenSSL’s implementation…