2921 matches found
GSD-2022-1002673 tracing: Fix potential double free in create_var_ref()
tracing: Fix potential double free in createvarref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...
GSD-2022-1002567 tracing: Fix sleeping function called from invalid context on RT kernel
tracing: Fix sleeping function called from invalid context on RT kernel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...
Sealighter - Easy ETW Tracing for Security Research
I created this project to help non-developers dive into researching Event Tracing for Windows ETW and Windows PreProcessor Tracing WPP. Features Subscribe to multiple ETW and WPP Providers at once Automatically parse events into JSON without needing to know format Robust Event filtering including...
Malicious code in media-types-service-tracing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ed609347a347f0e8ee4901959884ebab530fc19b319cede317a7ab5444ba6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2198 Malicious code in core-tracing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c96af24051cb27c2f35974f06c2c5ab249abf90adda776ed4714c88c140aee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in core-tracing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c96af24051cb27c2f35974f06c2c5ab249abf90adda776ed4714c88c140aee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1316 Malicious code in azure-core-tracing-samples-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99498a2eb3e0f6e4af763517f7ec8298a0ed4706c71b96c05301715e7741a27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-core-tracing-samples-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 915d311a81fb12dc77bde863caaf8044744ccc476cc41476f886a9bdebb5882a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-core-tracing-samples-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99498a2eb3e0f6e4af763517f7ec8298a0ed4706c71b96c05301715e7741a27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1317 Malicious code in azure-core-tracing-samples-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 915d311a81fb12dc77bde863caaf8044744ccc476cc41476f886a9bdebb5882a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Bluetooth Signals Can Be Used to Track Smartphones, Say Researchers
Researchers warn Bluetooth signals can be used to track device owners via a unique fingerprinting of the radio signal. The technique was presented via a paper presented at IEEE Security and Privacy conference last month by researchers at the University of California San Diego. The paper suggests...
CVE-2021-44080
A Command Injection vulnerability in httpd web server setup.cgi in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connectiontype parameter of the statussupportdiagnostictracing.json endpoint...
Security Bulletin: IBM MQ trace can inadvertently trace sensitive data (CVE-2022-22325)
Summary An issue was identified with IBM MQ tracing logic used by queue managers and native C-based MQ clients that meant sensitive data could be captured while IBM MQ trace was running. This data would be stored in plaintext within the IBM MQ trace files. Vulnerability Details CVEID:...
The vulnerability of the Windows Event Tracing service allows attackers to escalate their privileges.
The vulnerability of the Windows Event Tracing service is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the Windows Event Tracing service in Microsoft Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows Event Tracing service in Microsoft Windows is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
De-anonymizing Bitcoin
Andy Greenberg wrote a long article -- an excerpt from his new book -- on how law enforcement de-anonymized bitcoin transactions to take down a global child porn ring. Within a few years of Bitcoins arrival, academic security researchers -- and then companies like Chainalysis -- began to tear...
The vulnerability of the Windows Event Tracing service in the Microsoft operating system allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Event Tracing service is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
VulnCheck KEV: CVE-2021-34486
Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation...
