Improving the Cryptanalysis of Lattice-Based Public-Key Algorithms

The winner of the Best Paper Award at Crypto this year was a significant improvement to lattice-based cryptanalysis. This is important, because a bunch of NISTs post-quantum options base their security on lattice problems. I worry about standardizing on post-quantum algorithms too quickly. We are...

CVE-2023-25535

Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation LPE. This vulnerability only affects first-time installations done prior to 8th March 2023...

Dell SupportAssist for Home PCs 访问控制错误漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. An access control error vulnerability exists in Dell SupportAssist for Home PCs that could lead to privilege...

Dell SupportAssist for Business PCs 安全漏洞

Dell SupportAssist for Business PCs is a client application for business computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A local authentication bypass vulnerability exists in Dell SupportAssist for Business PCs version...

Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. An elevation of privilege vulnerability exists in versions prior to Dell SupportAssist for Home PCs 3.13.2.19...

PT-2024-13185 · Dell +1 · Dell Supportassist For Home Pcs +2

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.0 through 3.14.1 Dell SupportAssist for Business PCs versions 3.0 through 3.4.1 Description: A security concern has been identified in Dell SupportAssist, impacting locally authenticated users on the...

Malicious code in webnotekc0506 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949927290d2ca7fb3a358f9d4608702cc9cc16169ab1f2ef45ab2df02a4acfb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fec8d7ec43c80d82430113c122d14e2ff81d81b32ded41933bbdf246305772b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SharpShares - Multithreaded C# .NET Assembly To Enumerate Accessible Network Shares In A Domain

Multithreaded C .NET Assembly to enumerate accessible network shares in a domain Built upon djhohnstein's SharpShares project .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local" /filter:SYSVOL,NETLOGON,IPC$,PRINT$ /verbose...

Malicious code in bug-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efb7c17cca635bcad819f04b791c7e40f0821550e9cf2ec54aa6395db0540ec8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in take-cam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee2b55b60fc9b59f49dfd774411ff14fd939fdde2e9bb6fe39d19730bb910092 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iifl_serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fee2df05c15b754e46f9e40e85e67b0499b639943c4674ff0ac4cce7a91aea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-1721 · Unknown · Inet Wireless Daemon

Name of the Vulnerable Software and Affected Versions: iNet wireless daemon IWD versions prior to 2.14 Description: The issue allows attackers to gain unauthorized access to a protected Wi-Fi network by skipping certain messages in the EAPOL handshake and sending a message with an all-zero key...

Malicious code in wlwz-2312-7708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5278474541c9b13f05047170d2095937206db31c20264da510a471e1757963f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7407 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5598f2500474143c1b6765ca2f10626af481f2562493214cc9504a92b497a5f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8202 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59747dc3a13e9e58d9a5f295e02a30c2356570f95a971250ed1604de38e407e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbc0976e1337a3efa48a52f77fdef02a7087dc45ceae46bbf74c460027671342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7806 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 429f162a437e29e187824827b59e4917853e02e9517a5bafaffd7c4df62202b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8204 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19d2bd70e492fa2d8455fb563e45d0bbde9cee99bd2e5a7fb5f674093278310b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 150bf82e31ac0ddbdcfdacf8e75ed3a3bc34e68b57b64427c76ef4e231f75746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...