102 matches found
Philips Mri 1.5T和Philips Mri 3T 信息泄露漏洞
Philips Mri 1.5T and Philips Mri 3T are both products of the Dutch company Philips.Philips Mri 1.5T is a magnetic resonance system. The Philips Mri 1.5T is a magnetic resonance system designed to help clinicians diagnose with confidence, explore new applications, and work efficiently.The Philips...
Philips Mri 1.5T 安全漏洞
The Philips Mri 3T is a magnetic resonance system from Philips Netherlands. It is used to help clinicians diagnose with confidence, explore new applications and work efficiently. A security vulnerability exists in the Philips MRI 1.5T and 3T that stems from the software's allocation of resources ...
Philips Mri 3T 访问控制错误漏洞
The Philips Mri 3T is a magnetic resonance system from Philips Netherlands. It is used to help clinicians diagnose with confidence, explore new applications and work efficiently. An access control error vulnerability exists in the Philips MRI 1.5T and 3T, which arises from software that does not...
NewStart CGSL MAIN 6.02 : nss Multiple Vulnerabilities (NS-SA-2021-0121)
The remote NewStart CGSL host, running version MAIN 6.02, has nss packages installed that are affected by multiple vulnerabilities: - When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel...
Data races in magnetic
Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T...
GHSA-WV4P-JP67-JR97 Data races in magnetic
Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T...
magnetic-mask.dostavka2.me Cross Site Scripting vulnerability OBB-2123492
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
When One Door Opens, Keep It Open: A New Tool for Physical Security Testing
As penetration testers, we spend most of our time working with different types of networks, applications, and hardware devices. Physical security is another fun area we get to work in during physical social engineering penetration tests and red team engagements, which sometimes includes attempts ...
DEF CON 27 安全漏洞
DEF CON 27 is a fuzzy form of wireless communication: near field magnetic induction NFMI. A security vulnerability exists in DEF CON 27 that allows remote attackers to exploit a buffer overflow by sending oversized packets via the NFMI Near Field Magnetic Induction protocol...
Oracle Linux 8 : nss (ELSA-2021-0538)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-0538 advisory. - CVE-2020-12403 chacha-poly issues - CVE-2020-12400 constant time ECC. - CVE-2020-6829 constant time ECC. Tenable has extracted the preceding...
CVE-2020-35925
An issue was discovered in the magnetic crate before 2.0.1 for Rust. MPMCConsumer and MPMCProducer allow cross-thread sending of a non-Send type...
Cross site scripting
An issue was discovered in the magnetic crate before 2.0.1 for Rust. MPMCConsumer and MPMCProducer allow cross-thread sending of a non-Send type...
CVE-2020-35925
Summary (concrete details): The issue CVE-2020-35925 affects the Rust magnetic crate up to version 2.0.1. The root cause: MPMCConsumer and MPMCProducer implementations unconditionally provided Sync/Send, allowing cross-thread sending of non-Send types. This creates a potential data race. The flaw...
Rust 安全漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in versions prior to Rust magnetic crate 2.0.1 that stems from MPMCConsumer and MPMCProducer allowing cross-threaded sends of non-sending types. No details of the vulnerability ar...
CVE-2020-6829
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been computed. This...
CVE-2020-6829
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been computed. This...
CVE-2020-6829
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been computed. This...
Dickey's BBQ Breach: Meaty 3M Payment Card Upload Drops on Joker's Stash
Popular U.S. smoked-meat franchise Dickey’s Barbecue Pit has been hit with a data breach, with cybercriminals posting the fat cap of the compromised data – 3 million payment cards – on the popular Joker’s Stash underground marketplace this week. The Dallas-based franchise, which is a subsidiary o...
Friday Squid Blogging: Nano-Sized SQUIDS
SQUID news: Physicists have developed a small, compact superconducting quantum interference device SQUID that can detect magnetic fields. The team l focused on the instruments core, which contains two parallel layers of graphene. As usual, you can also use this squid post to talk about the securi...
Is Your Chip Card Secure? Much Depends on Where You Bank
Chip-based credit and debit cards are designed to make it infeasible for skimming devices or malware to clone your card when you pay for something by dipping the chip instead of swiping the stripe. But a recent series of malware attacks on U.S.-based merchants suggest thieves are exploiting...