|
You are here |
securitylab.github.com | ||
| | | | |
github.blog
|
|
| | | | | It turns out that the first all Google phone includes a non-Google bug. Learn about the details of CVE-2022-38181, a vulnerability in the Arm Mali GPU. Join me on my journey through reporting the vulnerability to the Android security team, and the exploit that used this vulnerability to gain arbitrary kernel code execution and root on a Pixel 6 from an Android app. | |
| | | | |
insinuator.net
|
|
| | | | | From the end of 2019 on, we reported two critical vulnerabilities in the Ivanti DSM Suite to the vendor. The following CVE IDs were assigned to the issues (but note that they have a status of RESERVED, i.e. titles and descriptions may change in the future): CVE-2020-12441: Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 CVE-2020-13793: Unsafe storage of AD cre ... | |
| | | | |
www.zerodayinitiative.com
|
|
| | | | | [AI summary] A critical remote code execution vulnerability in SolarWinds Access Rights Manager allows attackers to execute arbitrary code with service account privileges if proper data validation is not enforced. | |
| | | | |
piware.de
|
|
| | | |||