536 matches found
CVE-2026-54875
Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...
CVE-2026-54875
OpenSSL versions 4.0, 3.6, 3.5, and 3.4 are vulnerable to a timing and cache side-channel on ARM64 and RISC-V platforms. The root cause is a non-constant-time optimized implementation of scalar point multiplication for SM2 private key operations, where execution time and cache-access patterns dep...
EUVD-2026-89006
Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...
cve-2017-5753
CVE-2017-5753 CVE-2017-5753, Spectre, PoC, C, ASM para OSX, MAC, Intel Arch Compilar: gcc -o a.out spectre.c Salida: 0x41414141 También se agregó la salida de Control Flow desde Hopper.app para Aprendices Visuales Puedes ajustar el tamaño de basura y obtener lecturas más confiables Dependiendo de...
spectre-attack
Spectre 攻击示例 使用 2018 年 1 月 2 日披露的“Spectre”漏洞利用的示例（CVE-2017-5753 和 CVE-2017-5715） Spectre 打破了不同应用程序之间的隔离。它允许攻击者诱骗遵循最佳实践的无错误程序泄露其秘密。事实上，这些最佳实践的安全性检查反而增加了攻击面，并可能使应用程序更容易受到 Spectre 攻击。 Spectre 论文 - Spectre 论文及代码来源 语言 C 语言，使用以下库： stdio.h stdint.h intrin.h - 用于 rdtscp 和 clflush 示例的功能是什么？ 我们将文本 "The...
retbleed-speculative-execution-poc
Retbleed: Ejecución Arbitraria de Código Especulativo mediante Desbordamiento del RSB Una reproducción práctica de Retbleed CVE-2022-29900 / CVE-2022-29901 — el ataque microarquitectónico de 2022 que rompió la defensa "Retpoline" al demostrar que las instrucciones ret, consideradas seguras durant...
spectre-attack-demo
Ejemplo de ataque Spectre Ejemplo de uso del exploit "Spectre" revelado el 2 de enero de 2018 CVE-2017-5753 y CVE-2017-5715 Spectre rompe el aislamiento entre diferentes aplicaciones. Permite a un atacante engañar a programas sin errores, que siguen las mejores prácticas, para que revelen sus...
Astra Linux – Vulnerability in gnupg1
Libgcrypt before version 1.7.8 is vulnerable to a cache-side-channel attack that can lead to a complete failure of the RSA-1024 algorithm. This attack occurs when the left-to-right method is used for computing the sliding-window expansion. It is believed that the same attack also works on the...
ROS-20260819-73-0075
The vulnerability in Python-Django relates to the exposure of information through caching. Exploiting this vulnerability allows an attacker to gain access to the memory of a supervisor machine or other virtual machines. This can be achieved by implementing attacks through secondary channels,...
Exploit for Observable Discrepancy in Intel Atom_C
🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability...
CVE-2025-71203: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table indexing under speculation The syscall number is a user-controlled value used to index into the syscall table. Use arrayindexnospec to clamp this value after the bounds check to prevent speculative...
MiracleLinux 3 : libgcrypt-1.4.4-7.AXS3 (AXSA:2013-678:01)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-678:01 advisory. Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version. Security issues fixed with this...
MiracleLinux 4 : libgcrypt-1.4.5-11.AXS4 (AXSA:2014-002:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-002:01 advisory. Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version. Security issues fixed with this...
EUVD-2025-202587
XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...
CVE-2025-63094
XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...
EUVD-2013-4146
Malware in sbrugna...
EUVD-2018-4410
Malware in sbrugna...
EUVD-2018-4406
Malware in sbrugna...