UBUNTU-CVE-2022-20486

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

UBUNTU-CVE-2022-20488

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

UBUNTU-CVE-2022-20480

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

UBUNTU-CVE-2022-20487

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

This Week in Spring - December 13th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! I truly, absolutely, can not believe that were nearly done with the year already! Have you made your new years resolutions? Submitted your expense reports? Its that time of the year when Im going to start focusing on staying...

PT-2022-14702 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible failure to persist permissions settings due to resource exhaustion in the NotificationChannel of NotificationChannel.java. This could lead to local...

PT-2022-14697 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible failure to persist permissions settings in the NotificationChannel of NotificationChannel.java due to resource exhaustion. This could lead to local...

PT-2022-14707 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible failure to persist permissions settings in the NotificationChannel of NotificationChannel.java due to resource exhaustion. This could lead to local...

PT-2022-14696 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible failure to persist permissions settings in the NotificationChannel of NotificationChannel.java due to resource exhaustion. This could lead to local...

IIS modules: The evolution of web shells and how to detect them

Web exploitation and web shells are some of the most common entry points in the current threat landscape. Web servers provide an external avenue directly into your corporate network, which often results in web servers being an initial intrusion vector or mechanism of persistence. Monitoring for...

Malicious code in read.node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ddf471b9c973b8f6e9dc9c46a3c4ad26c64012e45c73a8594e3a3ea0eb7b75c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in --hiljson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 346600b3c428f935cffe333f73dbf2bd10ff54fce19d9349db9de380ddc45de8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bluebird.node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0c6b2be1ebf3bf9a65811651abbc7aae0f170ef07c14322de309d2a76596b72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ionpackagesa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2498449d91210e7a1368b0b705157307aa6f00a84da63f3b58ea7155d7713f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ASB-A-241764135

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Malicious code in wangwanqi-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cf6c47162c0118287735eeb1ff3750f30aa8fa2addc6cd88a3f9fb7ffd267a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AlmaLinux 9 : redis (ALSA-2022:8096)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:8096 advisory. - Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis...

Threat Round up for November 11 to 18

Today, Talos is publishing a glimpse into the most prevalent threats weve observed between Nov. 11 and Nov. 18. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...

TripleCross - A Linux eBPF Rootkit With A Backdoor, C2, Library Injection, Execution Hijacking, Persistence And Stealth Capabilities.

TripleCross is a Linux eBPF rootkit that demonstrates the offensive capabilities of the eBPF technology. TripleCross is inspired by previous implant designs in this area, notably the works of Jeff Dileo at DEFCON 271, Pat Hogan at DEFCON 292, Guillaume Fournier and Sylvain Afchain also at DEFCON...

Malicious code in test-inherited-attrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f962e7dc884922f90141ffeaa6fce29bca1e10e59db0b32f2888ae1fdea2bd70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...