A few weeks ago, a new version for Fastjson was released (1.2.83) which contains a fix for a security vulnerability that allegedly allows an attacker to execute code on a remote machine. …

Overview In March 2022, Sophos fixed a critical vulnerability in its Sophos Firewall products. The vulnerability is tracked as CVE-2022–1040 and allows for remote code execution (RCE). An authentication bypass vulnerability allowing remote code execution was discovered in the User Portal and Webadmin of Sophos Firewall and responsibly disclosed to Sophos…

Introduction Let’s check how to FIX MSDT Vulnerability using SCCM and Intune (CVE-2022–30190). You can use Intune or SCCM or Group Policy to fix this vulnerability Microsoft Support Diagnostic Tool (MSDT) URL protocol. The CVE-2022–30190 Vulnerability is to deal with Windows Support Diagnostic Tool via MS Office files. A remote code…

To facilitate data storage, php usually converts data such as arrays into serialized form for storage, so what is serialization? Serialization is actually converting data into a reversible data structure. Naturally, the reverse process is called deserialization. There is a vivid example on the Internet, which will make us deeply…

Introduction Etcd is an open-source project launched by the CoreOS team in June 2013. Its goal is to build a highly available distributed key-value database for service discovery, shared configuration, and consistency assurance. It has been widely used in Kubernetes, ROOK, CoreDNS, M3 and OpenStack and other fields. Etcd internally uses…

Vulnerability Description Server Request Forgery (Server-Side Request Forgery). The vulnerabilities are caused by attackers constructing attack requests and transmitting them to the server for execution. Generally, it is used to detect data over the Internet or attack intranet services. SSRF Vulnerability Server-Side Request Forgery (SSRF) is simply an attack where the server will make…

Introduction A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default…

What Are DLL Files? DLL documents, or Dynamic Link Library documents, incorporate the sources a utility wishes to run successfully. These should encompass photos and a library of executable functions. DLL documents can’t be opened via way of means of stop-users, they can best be opened via way of means of their related utility…

Introduction The rapid development of the Internet industry, cloud services have become particularly important. Almost every enterprise needs to use cloud computing services to manage a large amount of sensitive and confidential data. Therefore, the use of cloud services in any type of enterprise is inevitable. of.