147 matches found
Qualcomm 芯片缓冲区错误漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm Chip WLAN module, which arises fr...
CVE-2022-33252
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame...
CVE-2022-33252 Buffer over-read in WLAN
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame...
CVE-2022-33252
CVE-2022-33252 is a reported information disclosure due to a buffer over-read in WLAN when handling IBSS beacons frames. The vulnerability is described across multiple feeds (NVD/Red Hat/NCSC/PRION/CVE lists) as affecting WLAN/buffer handling, with the issue categorized under information disclosu...
PT-2023-13263 · Qualcomm · Snapdragon +150
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to information disclosure due to a buffer over-read in WLAN when handling IBSS beacons frames. Recommendations: At the moment, ther...
CVE-2022-33252: Out-of-bounds Read
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame...
BumbleBee leverages Zerologon to get Domain Controller Access
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Since May 2022, threat actors are leveraging BumbleBee as an initial vector from a Contact Forms campaign. The intrusion started with the delivery of an ISO file that contained an LNK and a DLL. Using...
In the Linux kernel 5.8 through 5.19.x before 5.19.16 local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.
...
Hunting for Cobalt Strike: Mining and plotting for fun and profit
Introduction Introduction Cobalt Strike is a commercial Command and Control framework built by Helpsystems. You can find out more about Cobalt Strike on the MITRE ATT&CK page. But it can also be used by real adversaries. In this post we describe how to use RiskIQ and other Microsoft technologies ...
Hunting for Cobalt Strike: Mining and plotting for fun and profit
Introduction Cobalt Strike is a commercial Command and Control framework built by Helpsystems. You can find out more about Cobalt Strike on the MITRE ATT&CK page. But it can also be used by real adversaries. In this post we describe how to use RiskIQ and other Microsoft technologies to see if you...
New campaign uses government, union-themed lures to deliver Cobalt Strike beacons
By Chetan Raghuprasad and Vanja Svajcer. Cisco Talos discovered a malicious campaign in August 2022 delivering Cobalt Strike beacons that could be used in later, follow-on attacks. Lure themes in the phishing documents in this campaign are related to the job details of a government organization i...
Russian Hackers Using DropBox and Google Drive to Drop Malicious Payloads — The Hacker News
The Russian state-sponsored hacking collective known as APT29 has been attributed to a new phishing campaign that takes advantage of legitimate cloud services like Google Drive and Dropbox to deliver malicious payloads on compromised systems. "These campaigns are believed to have targeted several...
PT-2022-31479
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description A potential issue exists in the ieee80211 beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2022-32291
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A potential issue exists in the rtllib beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-31942
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A potential issue exists in the ieee80211 beacons stop function, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-31740
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description A potential issue exists in the rtllib beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-31735
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description A potential issue exists in the ieee80211 beacons stop function, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-31166
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A potential issue exists in the ieee80211 beacons stop function, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-31474
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description A potential issue exists in the rtllib beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-30821
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A potential issue exists in the rtllib beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...