Lucene search
+L

7620 matches found

CNNVD
CNNVD
added 2026/03/10 12:00 a.m.17 views

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from the leakage of keys due to the side-channel information disclosure in the Trusted Execution Environment. This vulnerability may lead to the disclosure of physical information...

2.1CVSS5.8AI score0.0009EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.13 views

PT-2026-24444

In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

5.9AI score0.0009EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.9 views

PT-2026-24877

CVE-2026-3929 Side-channel information leakage in ResourceTiming in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. … https://t.co/Eu1lU8NeVv...

3.1CVSS5.8AI score0.00164EPSS
SaveExploits0References6
CNVD
CNVD
added 2026/03/09 12:00 a.m.20 views

Google Android Information Disclosure Vulnerability (CNVD-2026-16154)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability. The vulnerability is caused by a possible way to access the GPU cache due to side channel information leakage in drawLayersInternal of SkiaRenderEngine.cp...

7.4CVSS5.7AI score0.00091EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/03/06 1:34 a.m.9 views

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

7.5CVSS5.9AI score0.00379EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2026/03/06 12:00 a.m.28 views

Securing Cryptography in the Age of Quantum Computing and AI: Threats, Implementations, and Strategic Response

This review examines how quantum computing and artificial intelligence challenge current cryptographic systems. We analyze the literature to assess the resilience of algorithms against quantum attacks Shor's and Grover's algorithms and AI-enhanced cryptanalysis. RSA and elliptic curve cryptograph...

5.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/03/06 12:00 a.m.20 views

Radio-Frequency Side-Channel Analysis of a Trapped-Ion Quantum Computer

Analogously to classical computers, quantum processors exhibit side channels that may give attackers access to potentially proprietary algorithms. We identify and exploit a previously unexplored side channel in trapped-ion quantum processors that arises from the radio-frequency RF signals used to...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/03/05 10:16 p.m.17 views

CVE-2026-28464

OpenClaw versions prior to 2026.2.12 use non-constant-time string comparison for hook token validation, allowing attackers to infer tokens through timing measurements. Remote attackers with network access to the hooks endpoint can exploit timing side-channels across multiple requests to gradually...

8.2CVSS0.00386EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/05 9:59 p.m.10 views

CVE-2026-28464 OpenClaw < 2026.2.12 - Timing Attack in Hooks Token Authentication

OpenClaw versions prior to 2026.2.12 use non-constant-time string comparison for hook token validation, allowing attackers to infer tokens through timing measurements. Remote attackers with network access to the hooks endpoint can exploit timing side-channels across multiple requests to gradually...

8.2CVSS6AI score
SaveExploits0References5
EUVD
EUVD
added 2026/03/05 9:59 p.m.22 views

EUVD-2026-9910

OpenClaw versions prior to 2026.2.12 use non-constant-time string comparison for hook token validation, allowing attackers to infer tokens through timing measurements. Remote attackers with network access to the hooks endpoint can exploit timing side-channels across multiple requests to gradually...

9.8CVSS5.9AI score0.00386EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/05 9:30 p.m.14 views

GHSA-MJQR-5C55-G77H @perfood/couch-auth has an Observable Timing Discrepancy

An Observable Timing Discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

7.5CVSS5.8AI score0.00379EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/03/05 9:30 p.m.12 views

@perfood/couch-auth has an Observable Timing Discrepancy

An Observable Timing Discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

7.5CVSS5.8AI score0.00379EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/03/05 9:16 p.m.9 views

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

7.5CVSS5.8AI score0.00379EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/05 9:16 p.m.12 views

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

7.5CVSS0.00379EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/05 12:00 a.m.6 views

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

5.9AI score0.00379EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/03/05 12:00 a.m.37 views

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

0.00379EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.26 views

OpenClaw 安全漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that stems from the use of non-constant time string comparisons for hook token validation, which can be exploited by an attacker to infer a token via a timed side channel...

8.2CVSS5.8AI score0.00386EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/05 12:00 a.m.54 views

CVE-2025-70949

Summary: CVE-2025-70949 affects @perfood/couch-auth v0.26.0. The vulnerability is an observable timing discrepancy that creates a timing side-channel, potentially allowing an attacker to access sensitive information during authentication. The available documents do not disclose a fixed version; r...

7.5CVSS5.9AI score0.00379EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.9 views

PT-2026-23512

Name of the Vulnerable Software and Affected Versions @perfood/couch-auth version 0.26.0 Description A timing discrepancy exists in @perfood/couch-auth version 0.26.0 that could allow attackers to access sensitive information through a timing side-channel. Recommendations At the moment, there is ...

7.5CVSS5.8AI score0.00379EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
added 2026/03/05 12:00 a.m.6 views

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

5.8AI score0.00379EPSS
SaveExploits0References3
Rows per page
Query Builder