12277 matches found
PT-2023-17467 · Amd · Amd Processors
Name of the Vulnerable Software and Affected Versions: AMD processors affected versions not specified Description: A potential power side-channel issue in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AM...
CVE-2022-48518
Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, whi...
Surviving the 800 Gbps Storm: Gain Insights from Gcore's 2023 DDoS Attack Statistics
Gcore Radar is a quarterly report prepared by Gcore that provides insights into the current state of the DDoS protection market and cybersecurity trends. This report offers you an understanding of the evolving threat landscape and highlights the measures required to protect against attacks...
Surviving the 800 Gbps Storm: Gain Insights from Gcore's 2023 DDoS Attack Statistics
Gcore Radar is a quarterly report prepared by Gcore that provides insights into the current state of the DDoS protection market and cybersecurity trends. This report offers you an understanding of the evolving threat landscape and highlights the measures required to protect against attacks...
PT-2023-5286 · Kofax · Kofax Power Pdf
Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability, as the target...
PT-2023-5453 · Kofax · Kofax Power Pdf Advanced
Name of the Vulnerable Software and Affected Versions: Kofax Power PDF Advanced affected versions not specified Description: The issue is related to a heap-based buffer overflow in the Kofax Power PDF Advanced software when processing PDF files. This can allow an attacker to execute arbitrary cod...
PT-2023-5452 · Kofax · Kofax Power Pdf Advanced
Name of the Vulnerable Software and Affected Versions: Kofax Power PDF Advanced affected versions not specified Description: The issue is related to a heap-based buffer overflow in the parsing of PDF files, which can be exploited to execute arbitrary code on affected installations. This requires...
EV Charger Hacking Poses a ‘Catastrophic’ Risk
Vulnerabilities in electric vehicle charging stations and a lack of broad standards threaten drivers—and the power grid...
IBM i 代码注入漏洞
IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A code injection vulnerability exists in IBM i versions 7.2, 7.3, 7.4, and 7.5 that stems from exploiting the DDM architecture and allows remote attackers to execute CL...
Researchers Use Power LED to Extract Encryption Keys in Groundbreaking Attack
By Deeba Ahmed This attack method can help attackers surpass all barriers to exploit side channels, which so far were not possible. This is a post from HackRead.com Read the original post: Researchers Use Power LED to Extract Encryption Keys in Groundbreaking Attack...
CVE-2023-21225
there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...
CVE-2023-21225
there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...
SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:2651-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2651-1 advisory. The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were...
Security Bulletin: This Power System update is being released to address CVE-2023-25683
Summary The PowerVM Hypervisor could allow an attacker to obtain sensitive information if they gain service access to the HMC Vulnerability Details CVEID:CVE-2023-25683 DESCRIPTION: IBM PowerVM Hypervisor could allow an attacker to obtain sensitive information if they gain service access to the...
Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Researchers Find Way to Recover Cryptographic Keys by Analyzing LED Flickers
In what's an ingenious side-channel attack, a group of academics has found that it's possible to recover secret keys from a device by analyzing video footage of its power LED. "Cryptographic computations performed by the CPU change the power consumption of the device which affects the brightness ...
The vulnerability of the Spectrum Power software-based web server allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Spectrum Power software web server relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...
CVE-2022-47593
Auth. subscriber+ SQL Injection SQLi vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize plugin = 1.6.35 versions...
