740 matches found
In-Spectre-Meltdown
In-Spectre-Meltdown Dieses Tool ermöglicht die Überprüfung von Angriffen auf die spekulative Ausführung Side-Channel-Angriffe, die viele moderne Prozessoren und Betriebssystemdesigns betreffen. CVE-2017-5754 Meltdown und CVE-2017-5715 Spectre ermöglichen unprivilegierten Prozessen, Geheimnisse vo...
IoT-Pentest-devices-and-purpose
IoT Pentest-Geräte und deren Zweck - Ausgabe 2025 Dieses Dokument beschreibt die neuesten Werkzeuge und Hardware für IoT-Sicherheitstests im Jahr 2025 und deckt verschiedene Protokolle und Technologien ab. Es beinhaltet hochmoderne Angriffe, neu entdeckte Schwachstellen sowie aktualisierte...
sgx-step
A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...
TID-The-Instant-Destroyer
TID — Der sofortige Zerstörer Unabhängige Sicherheitsforschung im Bereich des Schutzes vor Cache-basierten Seitenkanalangriffen. Übersicht TID ist ein spezialisiertes Protokoll, das darauf ausgelegt ist, empfindliche Datenreste wie kryptografische Schlüssel unmittelbar nach der Nutzung aus den...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Prior to version 3.21 of GitHub Enterprise Server, there was a security...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error during the intra-handshake attestation.. An attacker can impersonate a trusted service endpoint and gain unauthorized access to sensitive data or operations by extracting the ephemeral TLS private key through...
Red-Teaming Claude Opus and ChatGPT-Based Security Advisors for Trusted Execution Environments
Trusted Execution Environments TEEs e.g., Intel SGX and ArmTrustZone aim to protect sensitive computation from a compromised operating system, yet real deployments remain vulnerable to microarchitectural leakage, side-channel attacks, and fault injection. In parallel, security teams increasingly...
Trojan-Resilient NTT: Protecting against Control Flow and Timing Faults on Reconfigurable Platforms
Number Theoretic Transform NTT is the most essential component for polynomial multiplications used in lattice-based Post-Quantum Cryptography PQC algorithms such as Kyber, Dilithium, NTRU etc. However, side-channel attacks SCA and hardware vulnerabilities in the form of hardware Trojans may alter...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003848)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003848 advisory. kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of...
CVE-2022-26382
While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts. Side-channel attacks on the text by using specially crafted fonts could have lead to this text being inferred by the webpage. This vulnerability affects Firefox 98...
CVE-2019-18222
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks...
Navigating the Dual-Use Nature and Security Implications of Reconfigurable Intelligent Surfaces in Next-Generation Wireless Systems
Reconfigurable intelligent surface RIS technology offers significant promise in enhancing wireless communication systems, but its dual-use potential also introduces substantial security risks. This survey explores the security implications of RIS in next-generation wireless networks. We first...
EUVD-2019-6640
Malware in sbrugna...
EUVD-2020-5192
Malware in sbrugna...
EUVD-2019-7407
Malware in sbrugna...
EUVD-2019-9548
Malware in sbrugna...
EUVD-2013-0208
Malware in sbrugna...
EUVD-2019-18868
Malware in sbrugna...