Tencent Security Xuanwu Lab Daily News
• PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec (CVE-2021-4034) | Qualys Security Blog:
https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034
・ PwnKit – Qualys 研究团队对这两天爆出的 polkit pkexec root 提权漏洞的分析
– Jett
• 从Challenge42看Linux提权基本技巧:
https://tttang.com/archive/1414/
・ 从Challenge42看Linux提权基本技巧.
– lanying37
• # Exploring the Playstation 5 Security – Userland:
https://github.com/ChendoChap/PS5-Webkit-Execution
・ 利用 ROP gadgets 实现 PlayStation 5 用户态的代码执行
– Jett
• Hacking the Apple Webcam (again):
https://www.ryanpickren.com/safari-uxss
・ Hacking the Apple Webcam (again) – Gaining unauthorized camera access via Safari UXSS
– Jett
• About the security content of macOS Big Sur 11.6.3 – Apple 支持 (中国):
https://support.apple.com/zh-cn/HT213055
・ Apple 今天发布多个产品补丁更新，其中包括修复玄武实验室报告的两个漏洞
– Jett
• JAVA反序列化之C3P0:
https://tttang.com/archive/1411/
・ JAVA反序列化之C3P0.
– lanying37
• [macOS, Network] Checking your browser before accessing rhinosecuritylabs.com.:
https://rhinosecuritylabs.com/network-security/bypassing-little-snitch-firewall/
・ Bypassing Little Snitch Firewall with Empty TCP Packets
– Jett
• CVE-2021-44790: Code Execution on Apache via an Integer Underflow:
https://www.thezdi.com/blog/2022/1/25/cve-2021-44790-code-execution-on-apache-via-an-integer-underflow
・ Apache httpd mod_lua 整数溢出 RCE 漏洞分析（CVE-2021-44790）
– Jett
• [Tools] GitHub – gaasedelen/lucid: An Interactive Hex-Rays Microcode Explorer:
https://github.com/gaasedelen/lucid
・ Lucid – An Interactive Hex-Rays Microcode Explorer
– Jett
• [Android] BRATA Android Trojan Updated with ‘Kill Switch’ that Wipes Devices:
https://threatpost.com/brata-android-trojan-kill-switch-wipes/177921/
・ 新版本的 BRATA 木马 App 增加 GPS 跟踪和高级代码混淆特性
– Jett
* 查看或搜索历史推送内容请访问：
https://sec.today
* 新浪微博账号：腾讯玄武实验室
https://weibo.com/xuanwulab
原文始发于微信公众号（腾讯玄武实验室）：每日安全动态推送(01-27)
