cve-2017-5753

CVE-2017-5753 CVE-2017-5753, Spectre, PoC, C, ASM 适用于 OSX, MAC, Intel Arch 编译: gcc -o a.out spectre.c 输出: 0x41414141 另外，为视觉学习者添加了来自 Hopper.app 的控制流输出 您可以调整垃圾数据大小以获得更可靠的读取结果 根据CPU活动情况，在具有小缓存的老旧设备上，当活动频繁时，命中率较低。...

spectre-attack

Spectre 攻击示例 使用 2018 年 1 月 2 日披露的“Spectre”漏洞利用的示例（CVE-2017-5753 和 CVE-2017-5715） Spectre 打破了不同应用程序之间的隔离。它允许攻击者诱骗遵循最佳实践的无错误程序泄露其秘密。事实上，这些最佳实践的安全性检查反而增加了攻击面，并可能使应用程序更容易受到 Spectre 攻击。 Spectre 论文 - Spectre 论文及代码来源 语言 C 语言，使用以下库： stdio.h stdint.h intrin.h - 用于 rdtscp 和 clflush 示例的功能是什么？ 我们将文本 "The...

spectre-attack-demo

Ejemplo de ataque Spectre Ejemplo de uso del exploit "Spectre" revelado el 2 de enero de 2018 CVE-2017-5753 y CVE-2017-5715 Spectre rompe el aislamiento entre diferentes aplicaciones. Permite a un atacante engañar a programas sin errores, que siguen las mejores prácticas, para que revelen sus...

Exploit for Observable Discrepancy in Intel Atom_C

🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability...

Astra Linux – Vulnerability in gnupg1

Libgcrypt before version 1.7.8 is vulnerable to a cache-side-channel attack that can lead to a complete failure of the RSA-1024 algorithm. This attack occurs when the left-to-right method is used for computing the sliding-window expansion. It is believed that the same attack also works on the...

MiracleLinux 3 : libgcrypt-1.4.4-7.AXS3 (AXSA:2013-678:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-678:01 advisory. Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version. Security issues fixed with this...

MiracleLinux 4 : libgcrypt-1.4.5-11.AXS4 (AXSA:2014-002:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-002:01 advisory. Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version. Security issues fixed with this...

EUVD-2025-202587

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

EUVD-2013-4146

Malware in sbrugna...

EUVD-2018-4410

Malware in sbrugna...

EUVD-2018-4406

Malware in sbrugna...

EUVD-2017-16542

Malware in sbrugna...

EUVD-2014-0168

Malware in sbrugna...

EUVD-2016-7411

Malware in sbrugna...

EUVD-2018-2915

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-14737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover...

Spill the Beans: Exploiting CPU Cache Side-Channels to Leak Tokens from Large Language Models

Side-channel attacks on shared hardware resources increasingly threaten confidentiality, especially with the rise of Large Language Models LLMs. In this work, we introduce Spill The Beans, a novel application of cache side-channels to leak tokens generated by an LLM. By co-locating an attack...

CVE-2023-53024

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre v4, 2039f26f3aca "bpf: Fix leakage due to insufficient speculative store bypass mitigation" inserts lfence instructions after 1...

CVE-2023-53024

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre v4, 2039f26f3aca "bpf: Fix leakage due to insufficient speculative store bypass mitigation" inserts lfence instructions after 1...