Experts Detail Multi-Million Dollar Licensing Model of Predator Spyware

A new analysis of the sophisticated commercial spyware called Predator has revealed that its ability to persist between reboots is offered as an "add-on feature" and that it depends on the licensing options opted by a customer. "In 2021, Predator spyware couldn't survive a reboot on the infected...

Glibc Tunables Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 561, '3602eac894717d56555552c84fc6b0e4d6a4af72' = 561, 'a99db3715218b641780b04323e4ae5953d68a927' = 561, 'a8daca28288575ffc8c7641d40901b0148958fb1...

OMICARD System File Loading Code Execution

The vulnerability of the system’s file loading function in OMICARD’s marketing emails relates to the unlimited loading of dangerous types of files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

Server Side Template Injection (SSTI)

mlflow is vulnerable to Server-side Template Injection SSTI. The vulnerability is due to not using the sandboxed jinja2 loader while merging and rendering profile/recipe configuration yaml files in the renderandmergeyamlfunction within mlflow/utils/fileutils.py. If a user loads a malicious recipe...

Qualcomm Linux Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the qcommdtreadmetadata function in the drivers/soc/qcom/mdtloader.c file of the Qualcomm Linux kernel driver is related to the lack of control over the upper limit of allowable values. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2023-7996 · Plantronics · Plantronics Hub

Name of the Vulnerable Software and Affected Versions: Plantronics Hub affected versions not specified Description: The issue is related to a loader update vulnerability in the Plantronics Hub application for managing audio device settings. It is associated with synchronization errors when using ...

Rhadamanthys Stealer Version 0.5.0 Upgrade Overview

Summary: Rhadamanthys, the information-stealing malware, has taken a significant leap with its v0.5.0 upgrade, introducing expanded stealing features, raw syscalls, and an enhanced loader design, showcasing advanced evasion techniques. Its modular architecture allows for continuous updates,...

CVE-2023-48424

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

Advisory ROSA-SA-2023-2300

Software: grub2 2.02 OS: ROSA Virtualization 2.1 packageevrstring: grub2-2.02-106.0.3.rv3.src.rpm CVE-ID: CVE-2020-14372 BDU-ID: 2022-00326 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Secure Boot protocol implementation of the Grub2 operating system boot loader is related to an incorrect...

Improper Restriction of Operations within the Bounds of a Memory Buffer

Overview Affected versions of this package are vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer via the wasmloaderpreparebytecode function in core/iwasm/interpreter/wasmloader.c. An attacker can cause a denial of service by exploiting this vulnerability...

CVE-2023-48105

An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasmloaderpreparebytecode function in core/iwasm/interpreter/wasmloader.c...

WebAssembly Micro Runtime Security Vulnerability

WebAssembly Micro Runtime WAMR is a lightweight, standalone WebAssembly runtime open-sourced by the Bytecode Alliance. With a small footprint, high performance, and highly configurable features for applications ranging from embedded, IoT, and edge to Trusted Execution Environments TEEs, smart...

PT-2023-35593 · Git +1 · Vulkan-Loader

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as loader log, loader scanned icd add, and loader icd...

vulkan-loader:instance_create_fuzzer: Crash in loader_log

Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=6077599834832896 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: instancecreatefuzzer Job Type: libfuzzerasanvulkan-loader Platform Id: linux Crash Type: UNKNOWN READ Crash...

clamav:clamav_dbload_CDB_fuzzer: Memcpy-param-overlap in repeat

Detailed Report: https://oss-fuzz.com/testcase?key=5732124107603968 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7e5759a2e9c8,0x7e5761327788 and 0x7e5752135c10,...

loader-utils: prototype pollution in function parseQuery in parseQuery.js

A prototype pollution vulnerability was found in the parseQuery function in parseQuery.js in the webpack loader-utils via the name variable in parseQuery.js. This flaw can lead to a denial of service or remote code execution...

AMD EPYC Security Vulnerability

AMD EPYC is a line of x86 architecture server microprocessors from AMD, known in Chinese as "霄龙", which utilizes the Zen microarchitecture. A security vulnerability exists in AMD EPYC, which stems from the fact that improperly clearing sensitive data from the ASP boot loader could expose keys to ...

Default printer becomes "Webex Document Loader"

Even set the Citrix policy "Do not adjust the user’s default printer", the default printer becomes "Webex Document Loader" after logging in...

AMD EPYC Security Vulnerability

AMD EPYC is a line of x86 architecture server microprocessors from AMD, known in Chinese as "Xiao Long", utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC, which stems from Inadequate input validation in the ASP boot loader could allow a privileged attacker with...

CVE-2023-43572

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information...