222 matches found
Am-I-affected-by-Meltdown
ยฟEstoy afectado por Meltdown?! Comprobador de Meltdown CVE-2017-5754 ยฟQuรฉ soy? Prueba de concepto / Exploit / Comprueba si el sistema estรก afectado por la Variante 3: rogue data cache load CVE-2017-5754, tambiรฉn conocido como MELTDOWN. La idea bรกsica es que el usuario sabrรก si el sistema en...
Am-I-affected-by-Meltdown
ๆๆฏๅฆๅๅฐ Meltdown ๅฝฑๅ๏ผ๏ผMeltdown CVE-2017-5754 ๆฃๆฅๅจ ๆๆฏไปไน๏ผ ๆฆๅฟต้ช่ฏ / ๆผๆดๅฉ็จ / ๆฃๆฅ็ณป็ปๆฏๅฆๅๅฐๅไฝ 3๏ผๆถๆๆฐๆฎ็ผๅญๅ ่ฝฝ๏ผCVE-2017-5754๏ผ๏ผๅๅ MELTDOWN ็ๅฝฑๅใ ๅ ถๅบๆฌๆ่ทฏๆฏ่ฎฉ็จๆทไบ่งฃๅฝๅ่ฟ่ก็็ณป็ปๆฏๅฆๅทฒ้่ฟ KAISER ่กฅไธ้๏ผhttps://lkml.org/lkml/2017/10/31/884๏ผไน็ฑป็ๆนๆกๆญฃ็กฎไฟฎ่กฅใ ็ฎๅไป ้็จไบ Linux ๅฎๆฏๅฆไฝๅทฅไฝ็๏ผ ๅฎ้่ฟ /proc/kallsyms ๆฅๆพ็ณป็ป่ฐ็จ่กจ๏ผๅนถๆฃๆฅ้่ฟๅฉ็จ MELTDOWN ๆพๅฐ็็ณป็ป่ฐ็จๅฐๅๆฏๅฆไธ /proc/kallsyms...
SpeculativeExecutionAssessment
SpeculativeExecutionAssessment ่ฏไผฐ็ณป็ปๆฏๅฆๅญๅจไปฅไธโๆจๆตๆง่กโๆผๆด๏ผ CVE-2017-5715๏ผๅๆฏ็ฎๆ ๆณจๅ ฅ๏ผ CVE-2017-5753๏ผ่พน็ๆฃๆฅ็ป่ฟ๏ผ CVE-2017-5754๏ผๆถๆๆฐๆฎ็ผๅญๅ ่ฝฝ๏ผ ่ญฆๅ๏ผ่ฏท็กฎไฟๅจ็ๆ้้กนไธญๆชๅพ้โPrefer 32-bitโ๏ผ้ฆ้ 32 ไฝ๏ผใ ้่ฆๆๅ็ๆ้ ็ผ่งฃๆชๆฝ้่ฆ๏ผ 1. ่ฎพ็ฝฎๆณจๅ่กจๅผ๏ผ่กจๆ้ฒ็ ๆฏ/ๅฎๅ จไบงๅไธ Windows ๆดๆฐๅ ผๅฎน 2. ๅฎ่ฃ Windows ๆไฝ็ณป็ปๆดๆฐ๏ผๅฑไบ 2018 ๅนด 1 ๆๅฎๅ จๆๅบฆ่ดจ้ๆฑๆป็ไธ้จๅ๏ผ 3. ๅฏ็จๆณจๅ่กจ่ฎพ็ฝฎ 4. ๆดๆฐ็กฌไปถ/ๅบไปถ 5...
Astra Linux โ Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
A transient execution vulnerability in some AMD processors may allow an attacker to extract data from the L1D cache, potentially leading to the leakage of sensitive information across privileged boundaries...
Astra Linux โ Vulnerability in Linux
The IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors may allow a local user to obtain sensitive information from the data in the L1 cache under certain circumstances. IBM X-Force ID: 189296...
CVE-2026-63545
Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...
CVE-2026-64369
In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHEWORDACCESS loadunalignedzeropad reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions which may happen if reading from the second page results in an...
CVE-2026-54267
A flaw was found in the Angular framework's client-side hydration feature for Server-Side Rendered SSR applications. This vulnerability, known as DOM Clobbering, allows a remote attacker to inject malicious data into the application's internal data cache. By exploiting a predictable identifier us...
CVE-2026-53217
In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset, so hardware writes received data at dmaaddr + MVPP2SKBHEADROOM. The current CPU sync starts at dmaaddr and only covers rxbytes +...
EUVD-2026-38296
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during...
Use of Cache Containing Sensitive Information
Overview @angular/service-worker is an Angular - service worker tooling! Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information in the request reconstruction. An attacker can access sensitive session-restricted data or expose credentials by exploiting...
EulerOS Virtualization 2.13.1 : bind (EulerOS-SA-2026-1633)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In specific circumstances, due to a weakness in the Pseudo Random Number Generator PRNG that is used, it is possible for an attacker ...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003514)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003514 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003524)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003524 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...
GHSA-FG6F-75JQ-6523 Authlib has 1-click Account Takeover vulnerability
Security Advisory: Cache-Backed State Storage CSRF in Authlib The Security Labs team at Snyk has reported a security issue affecting Authlib, identified during a recent research project. The Snyk Security Labs team has identified a vulnerability that can result in a one-click account takeover in...
OESA-2025-2875 dhcp security update
The Dynamic Host Configuration Protocol DHCP is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks. Security Fixes: Unde...
CVE-2025-63094
XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...
CVE-2025-63094
XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...
CVE-2025-63094
The XiangShan Nanhu V2 and XiangShan Kunmighu V3 processors are vulnerable to a security flaw involving speculative execution and indirect branch prediction . This issue allows an attacker to perform a side-channel analysis of the data cache to gain unauthorized access to sensitive information . ...
CVE-2025-63094: Exposure of Sensitive Information to an Unauthorized Actor
XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...