/explore
|
You are here 
|
eligrey.com | ||
| | | | |
m417z.com
This is a write-up of a vulnerability that I discovered in Windows. The vulnerability was patched in December's Patch Tuesday, and the CVE assigned to it is CVE-2023-36003. The vulnerability allows a non-elevated process to inject a DLL into an elevated or otherwise inaccessible process, allowing for privilege escalation. The vulnerability is caused by a lack of security checks in the InitializeXamlDiagnosticsEx API, which is used for inspecting applications that use Extensible Application Markup Language (XAML) for their UI. XAML is the recommended way to build user interfaces in new Windows applications, and is used by more and more built-in applications, including Task Manager and Windows Terminal. |
|
| | | | | ||
| | | | |
boz.com
If you see decisions in absolute terms as wrong or right, it can be a challenge to pick your battles. Failure to pick the right battles can cost you valuable credibility. That's why learning to determine the importance of a decision is a critical skill. Doing so will allow you to save your energy for really meaningful issues. |
|
| | | | | ||
| | | | |
blog.netlab.360.com
The Log4j vulnerability that came to light at the end of the year can undoubtedly be considered a major event in the security community. Honeypot and botnet are our bread and butter, and we have been concerned about which botnets would be exploiting this since the vulnerability was made public. |
|
| | | | | ||
| | | | |
www.huntress.com
Huntress has observed threat actors exploiting a Microsoft Windows Server Update Services (WSUS) vulnerability (CVE-2025-59287). |
|
| | | |||
