/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 m417z.com
Privilege escalation using the XAML diagnostics API (CVE-2023-36003) - m417z / blog - A Blog About Stuff
| | seclists.org
Full Disclosure: Xbox 360 Hypervisor Privilege Escalation Vulnerability
2.2 parsecs away

Travel
| | [AI summary] An anonymous hacker disclosed a critical privilege escalation vulnerability in the Xbox 360 hypervisor and provided a proof of concept allowing arbitrary code execution through physical access.
| | reverse.put.as
Patching what Apple doesn't want to or how to make your "old" OS X versions a bit safer | Reverse Engineering
2.0 parsecs away

Travel
| | Today a local privilege escalation vulnerability was disclosed in this blog post. It describes a vulnerability in IOBluetoothFamily kernel extension (IOKit is a never-ending hole of security vulnerabilities). Mavericks and most probably all previous versions are vulnerable but not Yosemite. The reason for this is that Apple silently patched the bug in Yosemite. This is not a new practice, where Apple patches bugs in the latest and newly released OS X version and doesn't care about older versions.
| | www.atredis.com
CVE-2018-0952: Privilege Escalation Vulnerability in Windows Standard Collector Service - Atredis Partners
1.7 parsecs away

Travel
| | [AI summary] A detailed technical write-up analyzes a Windows Standard Collector Service privilege escalation vulnerability involving symlink attacks and arbitrary file creation, includes a proof-of-concept exploit, and describes the patch.
| | blog.infosectcbr.com.au
InfoSect: Weaknesses in Linux Kernel Heap Hardening
27.8 parsecs away

Travel
| Dr Silvio Cesare @silviocesare Summary Free list poisoning in a common heap exploitation technique which corrupts a heap allocators's ...