Sophos XG Firewall is a firewall solution that provides a combination of both Firewall and Endpoint for information technology infrastructure. Sophos XG Firewall introduces an innovative approach to the way that you manage your firewall, and how you can detect and respond to threats on your network. Architecture Previously, there was…

Introduction WordPress is used by more than 60 million websites, including 33.6% of the top 10 million websites as of February 2022, WordPress is one of the most popular content management system solutions in use. These third-party components pose a potential risk that we’ve written about before. The first step was…

Introduction Modern vehicles are often equipped with a remote keyless entry system. These RKE systems allow unlocking or starting the vehicle remotely. The goal of our research was to evaluate the resistance of a modern-day RKE system. Our research disclosed a Rolling-PWN attack vulnerability affecting all Honda vehicles currently existing on…

An Atlassian published a security advisory about a critical severity Unauthenticated Remote Code Execution vulnerability affecting Confluence Server and Data Center. According to the advisory, the vulnerability is being actively exploited and Confluence Server and Data Center versions after 1.3.0 are affected. The vulnerability is tracked as CVE-2022–26134 with a…

Overview We would like to announce that we have released Spring Data MongoDB 3.4.1 and 3.3.5 to address the following CVE report: CVE-2022–22980: Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods This vulnerability was responsible for information about an expression injection vulnerability in Spring Data MongoDB SpEL…

A few weeks ago, a new version for Fastjson was released (1.2.83) which contains a fix for a security vulnerability that allegedly allows an attacker to execute code on a remote machine. …

Overview In March 2022, Sophos fixed a critical vulnerability in its Sophos Firewall products. The vulnerability is tracked as CVE-2022–1040 and allows for remote code execution (RCE). An authentication bypass vulnerability allowing remote code execution was discovered in the User Portal and Webadmin of Sophos Firewall and responsibly disclosed to Sophos…

Introduction Let’s check how to FIX MSDT Vulnerability using SCCM and Intune (CVE-2022–30190). You can use Intune or SCCM or Group Policy to fix this vulnerability Microsoft Support Diagnostic Tool (MSDT) URL protocol. The CVE-2022–30190 Vulnerability is to deal with Windows Support Diagnostic Tool via MS Office files. A remote code…

To facilitate data storage, php usually converts data such as arrays into serialized form for storage, so what is serialization? Serialization is actually converting data into a reversible data structure. Naturally, the reverse process is called deserialization. There is a vivid example on the Internet, which will make us deeply…