amlsec

Automated Security Risk Identification in Cyber-Physical Production Systems Using AutomationML-Based Engineering Data This prototype implements the methods presented in the following two publications: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated Security Risk Identification Using...

inception

참고: 이 도구는 더 이상 활발하게 개발되지 않습니다. 대신 PCILeech를 참조하세요. INCEPTION Inception은 PCI 기반 DMA를 악용하는 물리 메모리 조작 및 해킹 도구입니다. 이 도구는 FireWire, Thunderbolt, ExpressCard, PC Card 및 기타 모든 PCI/PCIe 하드웨어 인터페이스를 통해 공격할 수 있습니다. Inception은 DMA를 사용하여 실행 중인 컴퓨터에 대해 침습적 및 비침습적 메모리 해킹을 수행할 수 있는 비교적 빠르고 안정적이며 쉽고 확장 가능한 방법을...

CVE-2026-45585

🔑 CVE-2026-45585 - YellowKey 🔓 CVE-2026-45585 YellowKey에 대한 고급 완화 조치 📌 YellowKey 취약점이란? YellowKeyCVE-2026-45585는 2026년 5월에 발견된 제로데이 물리적 공격 취약점으로, 공격자가 물리적 접근 만으로 Windows 11 장치의 BitLocker 암호화를 PIN, 비밀번호, 복구 키 없이 완전히 우회할 수 있게 합니다. 공격 작동 방식: 공격자가 장치를 WinREWindows 복구 환경로 부팅합니다. 특수 제작된 USB에 NTFS 트랜잭션...

CVE-2026-87262

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication...

EUVD-2026-79865

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

SUSE SLES12 Security Update : opensc (SUSE-SU-2026:4108-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4108-1 advisory. This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present...

CVE-2026-15923

The Zephyr SDIO subsystem function sdioiorwextendedhelper in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size = MINremaining, func-cis.maxblksize as the per-iteration step. The value func-cis.maxblksize is decoded directly from the SDIO card's CIS FUNCE tuple in sdiodecodec...

CVE-2026-15923 Infinite loop denial of service in Zephyr SDIO byte-I/O from a card-supplied zero max_blk_size

The Zephyr SDIO subsystem function sdioiorwextendedhelper in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size = MINremaining, func-cis.maxblksize as the per-iteration step. The value func-cis.maxblksize is decoded directly from the SDIO card's CIS FUNCE tuple in sdiodecodec...

CVE-2026-15923

CVE-2026-15923 is a denial-of-service vulnerability in the Zephyr RTOS SDIO subsystem. The function sdio_io_rw_extended_helper() in subsys/sd/sdio.c uses func->cis.max_blk_size—decoded from a card's CIS FUNCE tuple without validation —as the per-iteration step in a byte-I/O loop. When a card r...

CVE-2026-15923 Infinite loop denial of service in Zephyr SDIO byte-I/O from a card-supplied zero max_blk_size

The Zephyr SDIO subsystem function sdioiorwextendedhelper in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size = MINremaining, func-cis.maxblksize as the per-iteration step. The value func-cis.maxblksize is decoded directly from the SDIO card's CIS FUNCE tuple in sdiodecodec...

EUVD-2026-77629

The Zephyr SDIO subsystem function sdioiorwextendedhelper in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size = MINremaining, func-cis.maxblksize as the per-iteration step. The value func-cis.maxblksize is decoded directly from the SDIO card's CIS FUNCE tuple in sdiodecodec...

CVE-2026-15923 Infinite loop denial of service in Zephyr SDIO byte-I/O from a card-supplied zero max_blk_size

The Zephyr SDIO subsystem function sdioiorwextendedhelper in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size = MINremaining, func-cis.maxblksize as the per-iteration step. The value func-cis.maxblksize is decoded directly from the SDIO card's CIS FUNCE tuple in sdiodecodec...

Security update for opensc

This update for opensc fixes the following issue: CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964. Patch Instructions: To install this SUSE update use the SU...

OPENSUSE-SU-2026:21820-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

CVE-2026-21103

Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege...

CVE-2026-21103

Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege...

CVE-2026-21103

Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege...

PT-2026-88837

Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege...

CVE-2026-78516

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally...

CVE-2026-78508

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack...