Microsoft Task Scheduler Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations...

An Inside Look at CISA’s Supply Chain Task Force

When one mentions supply chains these days, we tend to think of microchips from China causing delays in automobile manufacturing or toilet paper disappearing from store shelves. Sure, there are some chips in the communications infrastructure, but the cyber supply chain is mostly about virtual...

Mustang Panda targets European diplomats using enhanced PlugX backdoor

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Mustang Panda, a Chinese cyberespionage group, has been targeting European diplomats with a revised version of the PlugX backdoor in an ongoing campaign linked to the ongoing conflict in Ukraine. The group, also known as...

Task Manager Component Google Chrome Bypass

The vulnerability of the Task Manager component in Google Chrome relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

Scale-Out Backup Repository Offload task fails with "There is not enough space on the disk"

Article Applicability This KB Article is specific to an issue where a SOBR Offload task fails with an error reporting that "There is not enough space on the disk " and the path specified in the error contains 'VeeamBackupTemp '. Challenge Scale-Out Backup Repository's Offload task fails with erro...

StayKit - Cobalt Strike Kit For Persistence

StayKit is an extension for Cobalt Strike persistence by leveraging the executeassembly function with the SharpStay .NET assembly. The aggressor script handles payload creation by reading the template files for a specific execution type. IMPORTANT: To use the script a user will only need to load...

PT-2022-28812

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a use-after-free condition in the pm8001 scsi driver for aborted SSP/STP sas task. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-28872

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.4 Description The issue concerns a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28877

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.5 Description The issue concerns accessing NULL pt regs in the bpf get task stack function. It was introduced in version v5.9 and fixed in Linux Kernel version v5.16.5. The actual impact and attack...

PT-2022-28664

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to a use-after-free condition for aborted TMF sas task in the pm8001 scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28665

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to a use-after-free condition for aborted SSP/STP sas task in the scsi: pm8001 driver. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-28726

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue is related to a use-after-free condition for aborted TMF sas task in the pm8001 scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28813

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a use-after-free condition for aborted TMF sas task in the pm8001 scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

KDE KCron: Permissions and access control issues

KDE KCron is a task scheduler. KDE Kcron is vulnerable to privilege permission and access control issues, which could be exploited by an attacker to run unauthorized commands...

PT-2022-7503

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.10.0 Description The vulnerability is related to the KVM Kernel-based Virtual Machine component of the Linux kernel, specifically in the x86/mmu Memory Management Unit module. The issue arises from the async pagefault...

PT-2025-8048

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A task leak issue in the Linux kernel has been resolved. The problem occurred in the pm8001 send abort all function, where allocated SAS tasks were not properly freed if pm8001 tag alloc...

PT-2022-28516

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.18 Description The issue is related to a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28457

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.95 Description The issue is related to a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28460

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description The issue concerns accessing NULL pt regs in the bpf get task stack function. This is an automated identification of a potential security issue, but the actual impact and attack plausibility...

PT-2022-28423

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.175 Description The issue is related to a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For...