Search cyberveille.decio.ch

Found 11 bookmarks

Custom sorting

What a Cluster: Local Volumes Vulnerability in Kubernetes

Akamai security researcher Tomer Peled recently discovered a high-severity vulnerability in Kubernetes that was assigned CVE-2023-5528 with a CVSS score of 7.2. The vulnerability allows remote code execution with SYSTEM privileges on all Windows endpoints within a Kubernetes cluster. To exploit this vulnerability, the attacker needs to apply malicious YAML files on the cluster. This vulnerability can lead to full takeover on all Windows nodes in a cluster. This vulnerability can be exploited on default installations of Kubernetes (earlier than version 1.28.4), and was tested against both on-prem deployments and Azure Kubernetes Service. In this blog post, we provide a proof-of-concept YAML file as well as an Open Policy Agent (OPA) rule for blocking this vulnerability.

#akamai #EN #2024 #CVE-2023-5528 #Kubernetes #Windows #vulnerability

·akamai.com·Mar 18, 2024

What a Cluster: Local Volumes Vulnerability in Kubernetes

ESET fixed high-severity local privilege escalation bug in Windows products

Cybersecurity firm ESET has addressed a high-severity elevation of privilege vulnerability in its Windows security solution.

#securityaffairs #EN #2024 #ESET #Windows #high-severity #vulnerability

·securityaffairs.com·Feb 18, 2024

ESET fixed high-severity local privilege escalation bug in Windows products

Windows Installer EOP (CVE-2023-21800)

This blog post describes the details and methodology of our research targeting the Windows Installer (MSI) installation technology.

#doyensec #doyensecurity #EN #2023 #vulnerability #exploit #CVE-2023-21800 #MSI #Windows

·blog.doyensec.com·Mar 21, 2023

Windows Installer EOP (CVE-2023-21800)

Zoom Patches High Risk Flaws on Windows, MacOS Platforms

Video messaging giant Zoom has released patches for multiple security vulnerabilities that expose both Windows and macOS users to malicious hacker attacks.

#securityweek #EN #2023 #CVE-2022-36930 #CVE-2022-36929 #CVE-2022-36927 #patch-tuesday #zoom #zoom-rooms #windows #macos #video-conferencing #video-messaging #privilege-escalation #vulnerability

·securityweek.com·Jan 11, 2023

Zoom Patches High Risk Flaws on Windows, MacOS Platforms

Exploring ZIP Mark-of-the-Web Bypass Vulnerability (CVE-2022-41049)

Windows ZIP extraction bug (CVE-2022-41049) lets attackers craft ZIP files, which evade warnings on attempts to execute packaged files, even if ZIP file was downloaded from the Internet.

#breakdev #EN #2022 #CVE-2022-41049 #Windows #Mark-of-the-Web #Bypass #Vulnerability #analysis

·breakdev.org·Nov 12, 2022

Exploring ZIP Mark-of-the-Web Bypass Vulnerability (CVE-2022-41049)

Dec0ne/KrbRelayUp: KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings). - GitHub - Dec0ne/KrbRelayUp: KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

#GitHub #EN #2022 #no-fix #vulnerability #Windows #LDAP #domain #signing #KrbRelayUp #privilege #escalation

·github.com·Apr 27, 2022

Dec0ne/KrbRelayUp: KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

Windows Installer EOP (CVE-2023-21800)

This blog post describes the details and methodology of our research targeting the Windows Installer (MSI) installation technology.

#doyensec #doyensecurity #EN #2023 #vulnerability #exploit #CVE-2023-21800 #MSI #Windows

·blog.doyensec.com·Mar 21, 2023

Windows Installer EOP (CVE-2023-21800)

Zoom Patches High Risk Flaws on Windows, MacOS Platforms

Video messaging giant Zoom has released patches for multiple security vulnerabilities that expose both Windows and macOS users to malicious hacker attacks.

#securityweek #EN #2023 #CVE-2022-36930 #CVE-2022-36929 #CVE-2022-36927 #patch-tuesday #zoom #zoom-rooms #windows #macos #video-conferencing #video-messaging #privilege-escalation #vulnerability

·securityweek.com·Jan 11, 2023

Zoom Patches High Risk Flaws on Windows, MacOS Platforms

Exploring ZIP Mark-of-the-Web Bypass Vulnerability (CVE-2022-41049)

Windows ZIP extraction bug (CVE-2022-41049) lets attackers craft ZIP files, which evade warnings on attempts to execute packaged files, even if ZIP file was downloaded from the Internet.

#breakdev #EN #2022 #CVE-2022-41049 #Windows #Mark-of-the-Web #Bypass #Vulnerability #analysis

·breakdev.org·Nov 12, 2022

Exploring ZIP Mark-of-the-Web Bypass Vulnerability (CVE-2022-41049)

Dec0ne/KrbRelayUp: KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

#GitHub #EN #2022 #no-fix #vulnerability #Windows #LDAP #domain #signing #KrbRelayUp #privilege #escalation

·github.com·Apr 27, 2022

Dec0ne/KrbRelayUp: KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

#GitHub #EN #2022 #no-fix #vulnerability #Windows #LDAP #domain #signing #KrbRelayUp #privilege #escalation

·github.com·Apr 27, 2022

Dec0ne/KrbRelayUp: KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).