9603 matches found
DEBIAN-CVE-2019-9503
The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and unprocessed. I...
CVE-2005-4891
creationtimestamp| type| source ---|---|--- 2020-01-15 20:39:09+00:00| seen| https://t.me/cibsecurity/9221 2020-01-21 20:44:20+00:00| seen| https://t.me/cibsecurity/9324...
CVE-2020-0611
creationtimestamp| type| source ---|---|--- 2020-01-15 01:02:21+00:00| seen| https://t.me/N0iSeBit/365 2020-01-15 08:34:29+00:00| seen| https://t.me/cybershit/653...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I'm speaking at Indiana University Bloomington on January 30, 2020. I'll be at RSA Conference 2020 in San Francisco. On Wednesday, February 26, at 2:50 PM, I'll be part of a panel on "How to Reduce Supply Chain Risk: Lessons from...
Threat Source newsletter (Jan. 9, 2019)
Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. We’re back after a long break for the holidays. And 2020 is already off to a fast start as tensions continue to rise in the Middle East...
Beers with Talos Ep. #69: 2019 Threat Recap - RATs, Turtles, and Worms, Oh My!
By Mitch Neff. Beers with Talos BWT Podcast episode No. 69 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded Dec. 20, 2019 In a shorter year-end EP, we take both a look back and a look forward. It seems...
CVE-2019-15214
A vulnerability was found in the Linux kernel’s core sound driver code. A use-after-free in a race condition between disconnection events could allow a local attacker who can trigger disconnection events remove or add hardware to crash the system, corrupt memory, or escalate privileges. Mitigatio...
FreeBSD : py-matrix-synapse -- multiple vulnerabilities (ed8cbad5-21a8-11ea-9b6d-901b0e934d69)
Matrix developers report : The synapse 1.7.1 release includes several security fixes as well as a fix to a bug exposed by the security fixes. All previous releases of Synapse are affected. Administrators are encouraged to upgrade as soon as possible. - Fix a bug which could cause room events to b...
macOS 10.14.6 (18G87) - Kernel Use-After-Free due to Race Condition in wait_for_namespace_event()
The XNU function waitfornamespaceevent in bsd/vfs/vfssyscalls.c releases a file descriptor for use by userspace but may then subsequently destroy that file descriptor using fpfree, which unconditionally frees the fileproc and fileglob. This opens up a race window during which the process could...
py-matrix-synapse -- multiple vulnerabilities
Matrix developers report: The synapse 1.7.1 release includes several security fixes as well as a fix to a bug exposed by the security fixes. All previous releases of Synapse are affected. Administrators are encouraged to upgrade as soon as possible. Fix a bug which could cause room events to be...
macOS 10.14.6 (18G87) - Kernel Use-After-Free due to Race Condition in wait_for_namespace_event()
macOS 10.14.6 18G87 - Kernel Use-After-Free due to Race Condition in waitfornamespaceevent The XNU function waitfornamespaceevent in bsd/vfs/vfssyscalls.c releases a file descriptor for use by userspace but may then subsequently destroy that file descriptor using fpfree, which unconditionally fre...
Unspecified Vulnerability in Tecno Camon iClick (CNVD-2020-14790)
The Transn Tecno Camon iClick is a smartphone from the Chinese company Transn. An unspecified vulnerability exists in Tecno Camon iClick. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...
Unspecified Vulnerability in Tecno Camon (CNVD-2020-14795)
The Tecno Camon is a Camon series smartphone from the Chinese company Transocean. An unspecified vulnerability exists in Tecno Camon. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I'm speaking at SecIT by Heise in Hannover, Germany on March 26, 2020. The list is maintained on this page...
DEBIAN-CVE-2019-19769
In the Linux kernel 5.3.10, there is a use-after-free read in the perftracelockacquire function related to include/trace/events/lock.h...
CVE-2019-19769
In the Linux kernel 5.3.10, there is a use-after-free read in the perftracelockacquire function related to include/trace/events/lock.h...
CVE-2019-10607
creationtimestamp| type| source ---|---|--- 2019-12-11 03:00:17+00:00| seen| https://t.me/indoghostsec/731 2019-12-11 16:24:35+00:00| seen| https://t.me/indoghostsec/751 2019-12-13 11:21:12+00:00| seen| Telegram/iQUZE2pIByE4vkwExY2sw7tjReCcmi36nOFNFwktNW4 2019-12-14 01:31:35+00:00| seen|...
CVE-2019-10595
creationtimestamp| type| source ---|---|--- 2019-12-11 03:00:17+00:00| seen| https://t.me/indoghostsec/731 2019-12-11 16:24:35+00:00| seen| https://t.me/indoghostsec/751 2019-12-13 11:21:12+00:00| seen| Telegram/iQUZE2pIByE4vkwExY2sw7tjReCcmi36nOFNFwktNW4 2019-12-14 01:31:35+00:00| seen|...
CVE-2019-10601
creationtimestamp| type| source ---|---|--- 2019-12-11 03:00:17+00:00| seen| https://t.me/indoghostsec/731 2019-12-11 16:24:35+00:00| seen| https://t.me/indoghostsec/751 2019-12-13 11:21:12+00:00| seen| Telegram/iQUZE2pIByE4vkwExY2sw7tjReCcmi36nOFNFwktNW4 2019-12-14 01:31:35+00:00| seen|...
CVE-2019-2218
creationtimestamp| type| source ---|---|--- 2019-12-11 03:00:17+00:00| seen| https://t.me/indoghostsec/731 2019-12-11 16:24:35+00:00| seen| https://t.me/indoghostsec/751 2019-12-13 11:21:12+00:00| seen| Telegram/iQUZE2pIByE4vkwExY2sw7tjReCcmi36nOFNFwktNW4 2019-12-14 01:31:35+00:00| seen|...