Investgating Reported CVEs Cover

Investigating Reported Vulnerabilities: A Closer Look!

In vulnerability scanners or penetration testing reports, you might come across statements like “Service version x.y.z is vulnerable to CVE-YYYY-ABCD." However, it’s essential to delve deeper to confirm the actual vulnerability. Let’s consider a real example: We received a vulnerability report indicating a vulnerability ( CVE-2023-23916 ) in curl v7.74.0 within the Debian 11 environment. The CVE documentation mentions: Affected versions: curl 7.57.0 to and including 7.87.0 At first glance, it appears that v7....

July 30, 2023 · 2 min · Kumar Ashwin
Linux Command Line References

Linux - Command Line Struggles

Configure Network Using ip Command in Ubuntu Server Temporary Method - $ ip a # to get the interface name after connecting LAN $ sudo ip a add dev <network-interface-name> $ ip link set dev <network-interface-name> up $ sudo ip route add default via Permanent Solution - Ref: $ vim /etc/netplan/00-installer-config.yaml network: version: 2 ethernets: enx1027f579a565: dhcp4: false addresses: [] nameservers: addresses: [,,] routes: - to: default via: 192....

July 4, 2022 · 2 min · Kumar Ashwin