spectre-attack-demo

Spectre Attack 예제 2018년 1월 2일에 공개된 "Spectre" 취약점 CVE-2017-5753 및 CVE-2017-5715을 사용한 예제입니다. Spectre는 서로 다른 애플리케이션 간의 격리를 깨뜨립니다. 공격자가 모범 사례를 따르는 오류 없는 프로그램을 속여 비밀을 유출하도록 할 수 있습니다. 실제로, 해당 모범 사례의 안전 검사는 공격 표면을 증가시키고 애플리케이션을 Spectre에 더 취약하게 만들 수 있습니다. Spectre 논문 - Spectre 논문 및 코드 소스 언어 C, 다음 라이브러리 사용...

firehol

FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...

meltdown-exploit

MELTDOWN EXPLOIT POC Speculative optimizations execute code in a non-secure manner leaving data traces in microarchitecture such as cache. Lipp et. al 2018 published their code 2018-01-09 at https://github.com/IAIK/meltdown. Look at their paper for details: https://meltdownattack.com/meltdown.pdf...

meltdown-exploit

MELTDOWN EXPLOIT POC Спекулятивные оптимизации выполняют код небезопасным образом, оставляя следы данных в микроархитектуре, например, в кеше. Lipp et al. 2018 опубликовали свой код 2018-01-09 по адресу https://github.com/IAIK/meltdown. Подробности в их статье:...

SUSE CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

CVE-2025-14172-Nuclei-Template

📄 CVE-2025-14172를 위한 Nuclei 템플릿 🚀 개요 이 저장소는 WordPress 플러그인 WP Page Permalink Extension 의 인증 누락 취약점CVE-2025-14172을 탐지하기 위해 특별히 설계된 Nuclei 템플릿을 제공합니다. 이 문제는 인증된 공격자가 취약한 AJAX 액션을 통해 사이트의 재작성 규칙을 원격으로 초기화할 수 있게 합니다. 🔍 취약점 설명 CVE-2025-14172 는 WordPress용 WP Page Permalink Extension 플러그인의...

SUSE CVE-2026-97928

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgputtmmapbuffer reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 e.g...

CVE-2026-97928

A flaw was found in the AMD GPU amdgpu driver within the Linux kernel. When clearing video memory VRAM upon deallocation, the driver performs an unnecessary virtual memory flush operation. A local user can trigger this flaw during graphics memory operations, causing the graphics processing unit G...

TID-The-Instant-Destroyer

TID — 즉시 파괴자 캐시 기반 부채널 공격 방어 분야의 독립적인 보안 연구. 개요 TID는 사용 직후 CPU 캐시 계층$L1, L2, \text and L3$에서 민감한 데이터 잔여물예: 암호화 키을 제거하도록 설계된 특수 프로토콜입니다. 이는 시스템 메모리RAM에서 데이터가 지워진 후에도 하드웨어 구조에 데이터가 남아 있는 중요한 보안 격차를 해결합니다. 주요 성과 검증된 방어: Flush+Reload 및 유사한 마이크로아키텍처 부채널 공격을 효과적으로 완화합니다. 측정 가능한 성능: 비보호 접근: 78 CPU 사이클 캐...

spectre-attack

Spectre 공격 예제 2018년 1월 2일에 공개된 "Spectre" 익스플로잇 사용 예제 CVE-2017-5753 및 CVE-2017-5715 Spectre는 서로 다른 애플리케이션 간의 격리를 무너뜨립니다. 공격자가 모범 사례를 따르는 오류 없는 프로그램을 속여 비밀을 유출하도록 만들 수 있습니다. 실제로 이러한 모범 사례의 안전 검사는 공격 표면을 증가시키며 애플리케이션을 Spectre에 더 취약하게 만들 수 있습니다. Spectre 논문 - Spectre 논문 및 코드 소스 언어 C, 사용 라이브러리: stdio.h...

CVE-2026-97928

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgputtmmapbuffer reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 e.g...

DEBIAN-CVE-2026-97928

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgputtmmapbuffer reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 e.g...

CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

UBUNTU-CVE-2026-97928

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgputtmmapbuffer reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 e.g...

CVE-2026-97928 drm/amdgpu: skip the VMID 0 flush for VRAM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgputtmmapbuffer reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 e.g...

CVE-2026-97928

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgputtmmapbuffer reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 e.g...

EUVD-2026-86782

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgputtmmapbuffer reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 e.g...

CVE-2026-97928 drm/amdgpu: skip the VMID 0 flush for VRAM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgputtmmapbuffer reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 e.g...

CVE-2026-97928

The Linux kernel contains a vulnerability in the drm/amdgpu driver where the amdgpu_ttm_map_buffer() function incorrectly forces a VMID 0 flush when performing a clear-on-release on VRAM . Because VRAM is accessed via a direct memory controller (MC) address without a programmed GART window , this...

CVE-2026-97620 drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...