2498 matches found
WordPress Z Y N I T H Plugin <= 7.4.9 is vulnerable to Settings Change
Software Z Y N I T H Type Plugin Vulnerable versions = 7.4.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-43940 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b82e28b179e8 Credits Dave Jong Patchstack Required...
CVE-2024-44067
The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite...
CVE-2024-44067
The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite...
T-Head XuanTie C910和C920 安全漏洞
The T-Head XuanTie C910 and T-Head XuanTie C920 are both high-efficiency CPU processors from China-based T-Head. A security vulnerability exists in the T-Head XuanTie C910 and C920 that stems from an instruction that allows an unprivileged attacker to write to an arbitrary physical memory locatio...
CVE-2024-44067
The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 are susceptible to a hardware vulnerability known as GhostWrite . The root cause involves specific instructions that allow unprivileged attackers to write to arbitrary physical memory locations . Pr...
CVE-2024-44067: Improper Restriction of Operations within the Bounds of a Memory Buffer
The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite...
Geofence Warrants Ruled Unconstitutional—but That’s Not the End of It
Plus: US regulators fine T-Mobile $60 million for mishap with sensitive data, New Zealand approves Kim Dotcom’s US extradition, and San Francisco takes on deepfake porn...
GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks
A team of researchers from the CISPA Helmholtz Center for Information Security in Germany has disclosed an architectural bug impacting Chinese chip company T-Head's XuanTie C910 and C920 RISC-V CPUs that could allow attackers to gain unrestricted access to susceptible devices. The vulnerability h...
It's best to just assume you’ve been involved in a data breach somehow
Between AT&T, all the follow-on activity from Snowflake, Microsoft Outlook, and more, its best to probably just assume at this point that your personal information has somehow been involved in a data breach. Were only halfway through 2024, and weve already seen some of the largest data breaches a...
A week in security (July 8 – July 14)
Last week on Malwarebytes Labs: "Nearly all" AT&T customers had phone records stolen in new data breach disclosure Fake Microsoft Teams for Mac delivers Atomic Stealer Dangerous monitoring tool mSpy suffers data breach, exposes customer details iPhone users in 98 countries warned about spyware by...
CVE-2024-36433
An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...
CVE-2024-36434
CVE-2024-36434 describes an SMM callout vulnerability in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards. The issue is located in the SMM callout component of the Supermicro BMC firmware, with a reported buffer overflow in memory. Affected BIOS firmware versions are prior to 4.4. Accord...
Various Supermicro products Security breaches
The SuperMicro X11DPH-T and others are a motherboard from SuperMicro, Inc. A security vulnerability exists in various Supermicro products, which originates from an arbitrary memory write vulnerability on the motherboard. The affected products are as follows: SuperMicro X11DPH-T, SuperMicro...
PT-2024-5265 · Supermicro · Supermicro X11Dph-Tq +1
Name of the Vulnerable Software and Affected Versions: Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4 Description: The issue is related to an arbitrary memory write vulnerability in the BIOS firmware of certain Supermicro motherboards. This vulnerability c...
CVE-2024-36433: Improper Restriction of Operations within the Bounds of a Memory Buffer
An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...
CVE-2024-36433
An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...
CVE-2024-36434: Improper Restriction of Operations within the Bounds of a Memory Buffer
An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...
Various Supermicro products Security breaches
The SuperMicro X11DPH-T, among others, is a motherboard from SuperMicro USA. A security vulnerability exists in various Supermicro products, which stems from an SMM labeling vulnerability on the motherboard. The affected products are as follows: the SuperMicro X11DPH-T, SuperMicro X11DPH-Tq, and...
CVE-2024-36434
An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...
AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records
A security researcher who assisted with the deal says he believes the only copy of the complete dataset of call and text records of “nearly all” AT&T customers has been wiped—but some risks may remain...