473 matches found
lvi-lfb-attack-poc
LVI-LFB控制流劫持攻击（CVE-2020-0551）的PoC 本仓库包含LVI-LFB控制流劫持攻击PoC的源代码。 内容 lvi-cfh-poc - 通过行填充缓冲区喷射劫持另一个进程的控制流 白皮书 前提条件 1. Visual Studio 2015 2. 存在漏洞的Intel CPU 作者 Andrei Vlad LUȚAȘ Dan Horea LUȚAȘ 附加资源...
meltdown
Prueba de concepto de Meltdown Este repositorio contiene varias aplicaciones que demuestran el error de Meltdown. Para obtener información técnica sobre el error, consulte el artículo: Meltdown de Lipp, Schwarz, Gruss, Prescher, Haas, Mangard, Kocher, Genkin, Yarom y Hamburg Las aplicaciones de...
ExecASLR-ekoparty
ExecASLR - Abusando de los predictores de bifurcaciones de Intel para evadir ASLR ¿Qué es ASLR? Address Space Layout Randomization es una mitigación utilizada para dificultar la explotación de ataques de corrupción de memoria. En un escenario de vulnerabilidad de desbordamiento de búfer, por...
prefetch-tool
Herramienta de Prefetch KASLR para Windows Una herramienta de prueba de concepto para evadir KASLR ASLR del kernel en Windows 11. Inspirada en EntryBleed para Linux. Esta herramienta fue desarrollada como parte de un exploit dirigido a Windows 11 24H2. No soy un experto en canales laterales en...
SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2026:4019-1)
The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4019-1 advisory. - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading t...
RockyLinux 9 : microcode_ctl (RLSA-2026:68011)
The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:68011 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...
microcode_ctl security, bug fix, and enhancement update
4:20260812-1.0.3 - disable late update for 06-ad-01 - add support for UEK7/UEK8 and ueknext kernels - don't bother calling dracut if virtualized Orabug: 35710077 - ensure UEK also rebuilds initramfs Orabug: 34280058 - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no...
Security update for microcode_ctl
This update for microcodectl fixes the following issues: Intel CPU Microcode was updated to the 20260812 release bsc1274785 Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. Intel CPU Microcode was updated to the 20260811 release bsc1274785 Security...
SUSE-SU-2026:4019-1 Security update for microcode_ctl
This update for microcodectl fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...
CVE-2026-8798 Native entropy source retries the CPU entropy instructions without limit
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...
OESA-2026-2529 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information...
OESA-2026-1418 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper handling of values in the microcode flow for some IntelR Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity atta...
OESA-2026-1420 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper handling of values in the microcode flow for some IntelR Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity atta...
OESA-2026-1419 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper handling of values in the microcode flow for some IntelR Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity atta...
OESA-2026-1422 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper handling of values in the microcode flow for some IntelR Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity atta...
CLSA-2026-1770312389 Update of microcode_ctl
Update Intel CPU microcode to 20251111: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c000410; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000650; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2026-1770213436 Update of microcode_ctl
Update Intel CPU microcode to 20251111: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c000410; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000650; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
EUVD-2019-8960
Malware in sbrugna...