The Murky Ad-Tech World Powering Surveillance of US Military Personnel

A Florida data broker told a US senator it obtained sensitive data on US military members in Germany from a Lithuanian firm, which denies involvement—revealing the opaque nature of online ad surveillance...

The DEF CON 32 Hackers' Almanack

The DEF CON 32 Hackers' Almanack is a novel first cut at bridging the chasm between policy makers and technologists. Through a new initiative, dubbed "Franklin," the Almanack will elevate the most interesting, impactful and cutting edge talks, research, and vulnerabilities identified across the D...

CVE-2024-31153: Improper Input Validation

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-29223: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31858: Out-of-bounds Write

Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel AMT and Intel Standard Manageability security vulnerabilities

Intel AMT and Intel Standard Manageability are both active management technology modules from Intel Corporation USA. A security vulnerability exists in Intel AMT and Intel Standard Manageability that stems from improper initialization and could allow a privileged user to disclose information via...

Intel AMT and Intel Standard Manageability input validation error vulnerabilities

Intel AMT and Intel Standard Manageability are both active management technology modules from Intel Corporation. An input validation error vulnerability exists in Intel AMT and Intel Standard Manageability that stems from improper input validation and could allow an authenticated user to trigger ...

CVE-2023-31360

Incorrect default permissions in the AMD Integrated Management Technology AIM-T Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31361

A DLL hijacking vulnerability in AMD Integrated Management Technology AIM-T Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2023-31361

CVE-2023-31361 describes a DLL hijacking vulnerability in AMD AIM-T (Manageability Service) that could allow a local attacker with low privileges to escalate to arbitrary code execution. The connected sources confirm the affected component as AIM-T Manageability Service and attribute the issue to...

CVE-2023-31360

CVE-2023-31360 relates to AMD AIM-T Manageability Service on Windows. The AMD-SB-9012 bulletin confirms incorrect default ACL permissions in the installation directory, with potential privilege escalation and arbitrary code execution. The issue arises because the service runs with elevated privil...

CVE-2023-31360

Incorrect default permissions in the AMD Integrated Management Technology AIM-T Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31360

Incorrect default permissions in the AMD Integrated Management Technology AIM-T Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

AIM-T Manageability Service Vulnerabilities

AMD ID: AMD-SB-9012 Potential Impact: Arbitrary Code Execution Severity: High Summary A researcher reported incorrect default permissions and Dynamic Link Library DLL hijacking vulnerabilities within AMD Integrated Management Technology AIM-T. AIM-T is designed to enable AMD Desktop and mobile...

AMD Integrated Management Technology security vulnerabilities

AMD Integrated Management Technology is a management technology from Ultraviolet Semiconductor AMD that is primarily used to enable AMD DASH management features on AMD PRO hardware. A security vulnerability exists in AMD Integrated Management Technology that stems from incorrect default permissio...

AMD Integrated Management Technology security vulnerabilities

AMD Integrated Management Technology is a management technology from UltraMicroelectronics AMD that is primarily used to enable AMD DASH management features on AMD PRO hardware. A security vulnerability exists in AMD Integrated Management Technology that stems from a DLL hijacking vulnerability i...

CVE-2023-31361: Uncontrolled Search Path Element

A DLL hijacking vulnerability in AMD Integrated Management Technology AIM-T Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

Intel® QuickAssist Technology Software Advisory

Summary: A potential security vulnerabilities in some Intel® QuickAssist Technology software may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-31858...

CVE-2023-31360: Incorrect Default Permissions

Incorrect default permissions in the AMD Integrated Management Technology AIM-T Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

PT-2025-6485 · Intel · Intel Qat

Name of the Vulnerable Software and Affected Versions: IntelR QAT software versions prior to 2.0.5 Description: The issue is related to an untrusted pointer dereference in the I/O subsystem, which may allow an authenticated user to potentially enable information disclosure via local operating...