686 matches found
CVE-2025-31931
Uncontrolled search path for the Instrumentation and Tracing Technology API ITT API software before version 3.25.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable...
CVE-2025-31931
Uncontrolled search path for the Instrumentation and Tracing Technology API ITT API software before version 3.25.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable...
CVE-2025-31931
Summary: CVE-2025-31931 describes an uncontrolled search path issue in the Intel ITT API (Instrumentation and Tracing Technology API) prior to version 3.25.4, which can lead to privilege escalation when Ring 3 user applications execute with local access and authenticated user, given high attack c...
CVE-2025-31931
Uncontrolled search path for the Instrumentation and Tracing Technology API ITT API software before version 3.25.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable...
kernel: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content...
Endpoint Security Agent: A Comprehensive Approach to Real-Time System Monitoring and Threat Detection
As cyber threats continue to evolve in complexity and frequency, robust endpoint protection is essential for organizational security. This paper presents "Endpoint Security Agent: A Comprehensive Approach to Real-time System Monitoring and Threat Detection" a modular, real-time security solution...
Intel Instrumentation and Tracing Technology API 代码问题漏洞
The Intel Instrumentation and Tracing Technology API is a data collection interface from Intel Corporation USA. A code issue vulnerability exists in the Intel Instrumentation and Tracing Technology API prior to version 3.25.4, which stems from an uncontrolled search path that could lead to...
PT-2025-46421
Name of the Vulnerable Software and Affected Versions Instrumentation and Tracing Technology API ITT API versions prior to 3.25.4 Description The Instrumentation and Tracing Technology API ITT API software contains an uncontrolled search path issue within Ring 3: User Applications. This may allow...
CVE-2025-31931: Uncontrolled Search Path Element
Uncontrolled search path for the Instrumentation and Tracing Technology API ITT API software before version 3.25.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable...
ITT API Software Advisory
Summary: A potential security vulnerability in some Instrumentation and Tracing Technology API ITT API software may allow escalation of privilage. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31931 Description: Uncontrolled...
Hybrid Fuzzing with LLM-Guided Input Mutation and Semantic Feedback
Software fuzzing has become a cornerstone in automated vulnerability discovery, yet existing mutation strategies often lack semantic awareness, leading to redundant test cases and slow exploration of deep program states. In this work, I present a hybrid fuzzing framework that integrates static an...
Dynamic binary instrumentation (DBI) with DynamoRio
This blog introduces dynamic binary instrumentation DBI and guides you through building your own DBI tool with the open-source DynamoRIO framework on Windows 11. DBI enables powerful runtime analysis and modification of binaries critical for malware analysis, security auditing, reverse engineerin...
offsec
Offensive Security - Parcours en sécurité offensive !Difficu...
[SECURITY] Fedora 43 Update: rust-prometheus-0.14.0-1.fc43
Prometheus instrumentation library for Rust applications...
[SECURITY] Fedora 41 Update: rust-prometheus-0.14.0-1.fc41
Prometheus instrumentation library for Rust applications...
CVE-2022-50521 platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
In the Linux kernel, the following vulnerability has been resolved: platform/x86: mxm-wmi: fix memleak in mxmwmicallmxds|mx The ACPI buffer memory out.pointer returned by wmievaluatemethod is not freed after the call, so it leads to memory leak. The method results in ACPI buffer is not used, so...
EUVD-2019-7560
Malware in sbrugna...
EUVD-2018-12347
Malware in sbrugna...