Security Advisory - Side-Channel Vulnerability Variants 3a and 4

Intel publicly disclosed new variants of the side-channel central processing unit CPU hardware vulnerabilities known as Spectre and Meltdown. These variants known as 3A （CVE-2018-3640）and 4 （CVE-2018-3639, local attackers may exploit these vulnerabilities to cause information leak on the affected...

CVE-2018-3640

CVE-2018-3640 affects macOS EFI/Hypervisor components on macOS High Sierra 10.13.6 and Mojave 10.14, where systems with speculative execution and speculative reads of system registers may leak information via a side‑channel. The root cause is speculative execution side‑channel disclosures; a micr...

CVE-2018-3640

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read RSRE, Variant 3a...

CPU Side-Channel Information Disclosure Vulnerabilities: May 2018

On May 21, 2018, researchers disclosed two vulnerabilities that take advantage of the implementation of speculative execution of instructions on many modern microprocessor architectures to perform side-channel information disclosure attacks. These vulnerabilities could allow an unprivileged, loca...

CPU hardware utilizing speculative execution may be vulnerable to cache side-channel attacks

Overview CPU hardware utilizing speculative execution may be vulnerable to cache timing side-channel analysis. Two vulnerabilities are identified, known as "Variant 3a" and "Variant 4". Description Speculative execution is a technique used by many modern processors to improve performance by...

3a-box.com XSS vulnerability

Vulnerable URL: http://www.3a-box.com/en/product.aspx?classname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 02.03.2016 Latest check for patch:| 02.03.2016 01:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

IBM DB2 < 9.5 pack 3a - Connect Denial of Service Exploit

No description provided by source. Discovered by Dennis Yurichev [email protected] DB2TEST database should be present on target system from sys import from socket import sockobj = socketAFINET, SOCKSTREAM sockobj.connect argv1, 50000 sockobj.send...

IBM DB2 10.1 < Fix Pack 3a Multiple Vulnerabilities

According to its version, the installation of IBM DB2 10.1 running on the remote host is prior to Fix Pack 3a. It is, therefore, affected by one or more of the following vulnerabilities : - The included version of GSKit contains an error related to CBC-mode and timing that could allow an attacker...

IBM DB2 10.5 < Fix Pack 3a Multiple Vulnerabilities

According to its version, the installation of IBM DB2 10.5 running on the remote host is prior to Fix Pack 3a. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that could allow denial of...

Joomla Photo Blog SQL Injection

/ Joomla Component comphotoblog SQL injection vulnerability - category Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 12, 2009 Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://webguerilla.net/ + Download :...

Stack overflow

Stack-based buffer overflow in broid 1.0 Beta 3a allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long string in a .mp3 file...

CVE-2009-3213

Stack-based buffer overflow in broid 1.0 Beta 3a allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long string in a .mp3 file...

CVE-2009-3213

The CVE-2009-3213 issue is a stack-based buffer overflow in broid 1.0 Beta 3a, exposing remote denial of service and potential arbitrary code execution via a long string in an MP3 file. Multiple sources (NVD, CVE lists, PRION) corroborate the same description. No specific vulnerable versions beyo...

broid 1.0 Beta 3a (.mp3 File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= broid 1.0 Beta 3a .mp3 File Local Buffer Overflow PoC ======================================================= !/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack...

broid 1.0 Beta 3a - .mp3 Local Buffer Overflow (PoC)

broid 1.0 Beta 3a - .mp3 Local Buffer Overflow PoC !/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and...

broid 1.0 Beta 3a - '.mp3' Local Buffer Overflow (PoC)

!/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and Settings\ahmed\Desktop\hack4love.mp3" ESP 0012EF74 EBP 00FFE1...

broid 1.0 Beta 3a Buffer Overflow

!/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and Settings\ahmed\Desktop\hack4love.mp3" ESP 0012EF74 EBP 00FFE1...

IBM DB2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi. IBM DB2 Version 9.5 Fix Pack 3a came out, fixing also two DoS vulnerabilities I found. http://www-01.ibm.com/support/docview.wss?uid=swg21372517IBM DB2 1. "IZ37697: SECURITY: MALICIOUS CONNECT DATA STREAM CAN CAUSE DENIAL OF SERVICE." First is...