151 matches found
Design/Logic Flaw
An issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can extract the security ID key from the device. Then, the protected firmware can be extracted...
CVE-2021-43327
CVE-2021-43327 concerns Renesas RX65/RX65N microcontrollers. The connected sources confirm a hardware fault-based vulnerability where a VCC glitch enables an attacker to extract the device’s security ID key, which then allows access to the protected firmware. The risk is materialized via local fa...
PT-2021-23814 · Renesas · Renesas Rx65
Name of the Vulnerable Software and Affected Versions: Renesas RX65 and RX65N devices affected versions not specified Description: An issue was discovered in Renesas RX65 and RX65N devices, where an attacker can extract the security ID key from the device using a VCC glitch. This allows the...
PUB-A-198291476
In TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check. This could lead to local escalation of privilege with physical access to device internals with no additional execution privileges needed. User interaction is not needed for exploitation...
Spear-Phishing Campaign Exploits Glitch Platform to Steal Credentials
A long-term spear-phishing campaign is targeting employees of major corporations with emails containing PDFs that link to short-lived Glitch apps hosting credential-harvesting SharePoint phishing pages, researchers have found. Researchers from DomainTools discovered the suspicious PDFs – which...
MFA Glitch Leads to 6K+ Coinbase Customers Getting Robbed
The accounts of at least 6,000 Coinbase customers were robbed of funds after attackers bypassed the cryptocurrency exchange’s multi-factor authentication MFA. According to a notification letter PDF – seen and posted by BleepingComputer, which first reported the story – that Coinbase sent to...
Tesla “Recalls” Vehicles in China due to Safety Glitch
The recall affects over 200,000 Models 3 and Y vehicles...
Mozilla Firefox JavaScript WebGL API Vulnerability (GLitch) - Linux
Mozilla Firefox is prone to a vulnerability in the JavaScript WebGL API dubbed Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...
Mozilla Firefox JavaScript WebGL API Vulnerability (GLitch) - Windows / Mac OS X
Mozilla Firefox is prone to a vulnerability in the JavaScript WebGL API dubbed Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...
sos bug fix and enhancement update
The sos package contains a set of utilities that gather information from system hardware, logs, and configuration files. The information can then be used for diagnostic purposes and debugging. Bug Fixes and Enhancements: network glitch while running ethtool -e command in sosreport BZ1928627...
Zoom Screen-Sharing Glitch ‘Briefly’ Leaks Sensitive Data
A security blip in the current version of Zoom could inadvertently leak users’ data to other meeting participants on a call. However, the data is only leaked briefly, making a potential attack difficult to carry out. The flaw CVE-2021-28133 stems from a glitch in the screen sharing function of...
Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)
In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...
Nvidia Squashes High-Severity Jetson DoS Flaw
Nvidia has patched three vulnerabilities affecting its Jetson lineup, which is a series of embedded computing boards designed for machine-learning applications, in things like autonomous robots, drones and more. A successful exploit could potentially cripple any such gadgets leveraging the affect...
UK Police mistakenly deleted 150,000 arrest records in software glitch
By Waqas Reportedly, a software glitch wiped DNA and fingerprint data from the police computer. This is a post from HackRead.com Read the original post: UK Police mistakenly deleted 150,000 arrest records in software glitch...
Security update for MozillaThunderbird (moderate)
openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:2133-1 Rating: moderate References: 1178611 Cross-References: CVE-2020-26950 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update f...
PT-2020-13626 · Espressif · Esp32
Name of the Vulnerable Software and Affected Versions: ESP32 affected versions not specified Description: The issue concerns bypassing Secure Boot and Flash Encryption on ESP32 chips. It allows extracting decrypted flash data from a fully protected ESP32 chip using chip-level weaknesses, without...
Hacking AI-Graded Tests
The company Edgenuity sells AI systems for grading tests. Turns out that they just search for keywords without doing any actual semantic analysis...
CVE-2020-13471
Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...