wildfly: Potential Memory leak in Wildfly when using OpenTracing

A flaw was found in Wildfly. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability...

Security Bulletin: Daeja ViewONE Professional, Standard & Virtual is affected by a disclosing sensitive data when logging is enabled vulnerability

Summary Daeja ViewONE Professional, Standard & Virtual has addressed the following vulnerability. When logging is enabled in Daeja ViewONE, the user's current session ID can be written to log files or standard output. Vulnerability Details CVEID: CVE-2017-1211 DESCRIPTION: IBM Daeja ViewONE...

Microsoft Windows Event Tracing Out-Of-Bounds Access Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation...

wildfly: Potential Memory leak in Wildfly when using OpenTracing

A flaw was found in Wildfly. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability...

Exploit for CVE-2020-1034

This is a PoC Proof of Concept exploit for CVE-2020-1034, a vulnerability discovered by Microsoft and fixed on August 9, 2020. The exploit targets an unpatched Windows 10 2004, build 19041.488. The exploit code is written in C++ and uses the Windows API to manipulate the system's Event Tracing fo...

The vulnerability of the Windows operating system’s tracing service allows a hacker to increase their privileges.

The vulnerability of the Windows operating system’s tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the dev_map_read function in the input/output tracing utility Blktrace allows a attacker to cause a service failure.

The vulnerability of the devmapread function in the Blktrace input/output tracing utility is related to the operation of pushing the output data beyond the allowable buffer size in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CISOs Prep For COVID-19 Exposure Notification in the Workplace

With the potential of employees going back into the workplace on the horizon, chief information security officers CISOs are mulling applications that utilize exposure notifications in order to track COVID-19’s spread in the office. Steve Moore, chief security strategist with Exabeam, said he is...

CVE-2021-1662

Windows Event Tracing Elevation of Privilege Vulnerability...

CVE-2021-1662

Windows Event Tracing Elevation of Privilege Vulnerability...

Privilege escalation

Windows Event Tracing Elevation of Privilege Vulnerability...

CVE-2021-1662 Windows Event Tracing Elevation of Privilege Vulnerability

...

CVE-2021-1662

CVE-2021-1662 is a Windows Event Tracing Elevation of Privilege vulnerability (local, low complexity, high impact per CVSS 3.1). The available connected documents indicate Windows event tracing is the affected component and classify the issue as a local privilege escalation; no specific exploit d...

Windows Event Tracing Elevation of Privilege Vulnerability

...

PT-2021-1600 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing versions affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system's tracing service. It allows an attacker to potentially elevate their...

Microsoft Diagnostics Hub Standard Collector Service Security Vulnerability

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. A security vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. No information about this vulnerability is available at...

Microsoft Windows Event Tracing Security Vulnerability

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security vulnerability exists in Microsoft Windows Event Tracing, for which no information is...

The SolarWinds Investigation Ramps Up

Plus: Covid-19 contact tracing privacy, a Nissan source code leak, and more of the week's top security news...

CVE-2020-35693

On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy BLE device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offer...

Code injection

On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy BLE device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offer...