Am-I-affected-by-Meltdown

我受到 Meltdown 影响了吗？！Meltdown CVE-2017-5754 检查器 我是什么？ 概念验证 / 漏洞利用 / 检查系统是否受到变种3的影响：恶意数据缓存加载 CVE-2017-5754，又称MELTDOWN。 基本思想是用户将知道正在运行的系统是否已正确修补了类似KAISER补丁集（https://lkml.org/lkml/2017/10/31/884）的东西。 查看我的博客文章，它指导读者了解Meltdown概念验证：http://funwithbits.net/blog/programmers-guide-to-meltdown/ 目前仅适用于Linux...

Am-I-affected-by-Meltdown

¿Estoy afectado por Meltdown?! Comprobador de Meltdown CVE-2017-5754 ¿Qué soy? Prueba de concepto / Exploit / Comprueba si el sistema está afectado por la Variante 3: carga de datos de caché no autorizada CVE-2017-5754, también conocido como MELTDOWN. La idea básica es que el usuario sabrá si el...

SpeculativeExecutionAssessment

SpeculativeExecutionAssessment Evalúa un sistema para las vulnerabilidades de "ejecución especulativa" descritas en: CVE-2017-5715 branch target injection CVE-2017-5753 bounds check bypass CVE-2017-5754 rogue data cache load ADVERTENCIA: Asegúrese de que "Prefer 32-bit" no esté marcado en las...

Astra Linux – Vulnerability in Linux

The IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors may allow a local user to obtain sensitive information from the data in the L1 cache under certain circumstances. IBM X-Force ID: 189296...

CVE-2026-63545

Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...

CVE-2026-64369

In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHEWORDACCESS loadunalignedzeropad reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions which may happen if reading from the second page results in an...

CVE-2026-54267

A flaw was found in the Angular framework's client-side hydration feature for Server-Side Rendered SSR applications. This vulnerability, known as DOM Clobbering, allows a remote attacker to inject malicious data into the application's internal data cache. By exploiting a predictable identifier us...

CVE-2026-53217

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset, so hardware writes received data at dmaaddr + MVPP2SKBHEADROOM. The current CPU sync starts at dmaaddr and only covers rxbytes +...

Use of Cache Containing Sensitive Information

Overview @angular/service-worker is an Angular - service worker tooling! Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information in the request reconstruction. An attacker can access sensitive session-restricted data or expose credentials by exploiting...

EulerOS Virtualization 2.13.1 : bind (EulerOS-SA-2026-1633)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In specific circumstances, due to a weakness in the Pseudo Random Number Generator PRNG that is used, it is possible for an attacker ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003514 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003524 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

GHSA-FG6F-75JQ-6523 Authlib has 1-click Account Takeover vulnerability

Security Advisory: Cache-Backed State Storage CSRF in Authlib The Security Labs team at Snyk has reported a security issue affecting Authlib, identified during a recent research project. The Snyk Security Labs team has identified a vulnerability that can result in a one-click account takeover in...

OESA-2025-2875 dhcp security update

The Dynamic Host Configuration Protocol DHCP is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks. Security Fixes: Unde...

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 are affected by a speculative execution/indirect branch prediction vulnerability that enables side-channel access to data in the cache, allowing potential disclosure of sensitive information. Exploitation details are not provided in the connected docum...

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

OESA-2025-2766 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.CVE-2024-36357 In the Lin...