About the security content of Security Update 2022-005 Catalina

About the security content of Security Update 2022-005 Catalina This document describes the security content of Security Update 2022-005 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in the webhook event validator code, which does not use a constant-time comparison function to validate the webhook secret. It can allow an attacker to recover this secret as an attacker and then forge webhook events...

CVE-2022-32223

creationtimestamp| type| source ---|---|--- 2022-07-14 18:32:37+00:00| seen| https://t.me/cibsecurity/46245 2022-07-15 08:17:26+00:00| seen| Telegram/tvagmoXGD-sjRG5teDO-DfPH2iB-IEEjYRnLqN5-gAxoA 2022-07-16 09:11:59+00:00| seen| https://t.me/crackcodes/838 2022-09-21 11:03:01+00:00|...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: Im speaking as part of a Geneva Centre for Security Policy course on Cyber Security in the Context of International Security, online, on September 22, 2022. Im speaking at IT-Security INSIDE 2022 in Zurich, Switzerland, on Septembe...

CVE-2022-1891

creationtimestamp| type| source ---|---|--- 2022-07-14 09:33:43+00:00| seen| https://t.me/itsecnews/1001 2022-07-14 11:27:02+00:00| published-proof-of-concept| https://t.me/truesecator/3171 2023-01-27 00:46:57+00:00| seen| https://t.me/cibsecurity/57005 2025-04-03 17:35:53+00:00| seen|...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

Argo CD improper access control bug can allow malicious user to escalate privileges to admin level

Impact Impacts for versions starting with v1.0.0 All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level. To perform the following exploits, an authorized Argo CD use...

CVE-2022-31137

creationtimestamp| type| source ---|---|--- 2022-07-09 00:22:27+00:00| seen| https://t.me/cibsecurity/45849 2022-07-25 21:30:57+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/roxywiexec.rb 2022-12-26 15:30:06+00:00| seen|...

Researchers Detail Techniques LockBit Ransomware Using to Infect its Targets

LockBit ransomware attacks are constantly evolving by making use of a wide range of techniques to infect targets while also taking steps to disable endpoint security solutions. "The affiliates that use LockBit's services conduct their attacks according to their preference and use different tools...

The vulnerability of Thunderbird email client, as well as Firefox and Firefox ESR browsers, is related to improper handling of events triggered by window resize operations. This allows attackers to carry out spoofing attacks.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to improper handling of events related to the change in the size of the pop-up window. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks using a specially...

CVE-2022-33740

creationtimestamp| type| source ---|---|--- 2022-07-05 16:13:26+00:00| seen| https://t.me/cibsecurity/45582 2022-07-05 16:13:27+00:00| seen| https://t.me/cibsecurity/45583 2022-07-05 16:13:33+00:00| seen| https://t.me/cibsecurity/45586 2022-07-05 16:13:33+00:00| seen| https://t.me/cibsecurity/455...

CVE-2022-26365

creationtimestamp| type| source ---|---|--- 2022-07-05 16:13:26+00:00| seen| https://t.me/cibsecurity/45582 2022-07-05 16:13:27+00:00| seen| https://t.me/cibsecurity/45583 2022-07-05 16:13:33+00:00| seen| https://t.me/cibsecurity/45586 2022-07-05 16:13:33+00:00| seen| https://t.me/cibsecurity/455...

CVE-2022-33742

creationtimestamp| type| source ---|---|--- 2022-07-05 16:13:26+00:00| seen| https://t.me/cibsecurity/45582 2022-07-05 16:13:27+00:00| seen| https://t.me/cibsecurity/45583 2022-07-05 16:13:33+00:00| seen| https://t.me/cibsecurity/45586 2022-07-05 16:13:33+00:00| seen| https://t.me/cibsecurity/455...

CVE-2022-33741

creationtimestamp| type| source ---|---|--- 2022-07-05 16:13:26+00:00| seen| https://t.me/cibsecurity/45582 2022-07-05 16:13:27+00:00| seen| https://t.me/cibsecurity/45583 2022-07-05 16:13:33+00:00| seen| https://t.me/cibsecurity/45586 2022-07-05 16:13:33+00:00| seen| https://t.me/cibsecurity/455...

CVE-2020-27861

creationtimestamp| type| source ---|---|--- 2022-07-05 06:24:51+00:00| seen| Telegram/k8m3X8YhQhkrr48KHoFrxNHe2bYjefr1euDm-0TzPewCA 2022-07-05 14:02:24+00:00| seen| https://t.me/crackcodes/796 2023-08-14 19:34:11+00:00| published-proof-of-concept| https://t.me/GrayHatsHack/6194 2026-07-29...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

CVE-2022-22979

creationtimestamp| type| source ---|---|--- 2022-06-29 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6295 2024-02-08 11:36:46+00:00| seen| https://t.me/ctinow/181299 2024-02-08 12:06:30+00:00| seen| https://t.me/ctinow/181310 2024-02-08 13:11:30+00:00| seen|...