CyRC Vulnerability Advisory: Denial of service vulnerability in Jetty web server

CVE-2020-27223 is a denial of service vulnerability discovered in the Eclipse Foundation’s popular Jetty web server.
The post CyRC Vulnerability Advisory: Denial of service vulnerability in Jetty web server appeared first on Software Integrity Blog.
Continue reading CyRC Vulnerability Advisory: Denial of service vulnerability in Jetty web server

CyRC analysis: Authentication bypass vulnerability in Bouncy Castle

CVE-2020-28052 is an authentication bypass vulnerability discovered in Bouncy Castle’s OpenBSDBcrypt class. It allows attackers to bypass password checks.
The post CyRC analysis: Authentication bypass vulnerability in Bouncy Castle appeared first on … Continue reading CyRC analysis: Authentication bypass vulnerability in Bouncy Castle

World’s top hackers meet at the first 5G Cyber Security Hackathon

Our Defensics R&D team put a couple of Synopsys tools to the test in the 5G Cyber Security Hackathon in Oulu, Finland, and placed in both of their competitions.
The post World’s top hackers meet at the first 5G Cyber Security Hackathon appea… Continue reading World’s top hackers meet at the first 5G Cyber Security Hackathon

CyRC analysis: CVE-2018-18907 authentication bypass vulnerability in D-Link DIR-850L wireless router

This post is the Synopsys Cybersecurity Research Center’s (CyRC) analysis of CVE-2018-18907, an authentication bypass vulnerability in the D-Link DIR-850L wireless router. Overview CVE-2018-18907 refers to an authentication vulnerability with D-L… Continue reading CyRC analysis: CVE-2018-18907 authentication bypass vulnerability in D-Link DIR-850L wireless router