44 matches found
CVE-2024-53682 regulator: axp20x: AXP717: set ramp_delay
In the Linux kernel, the following vulnerability has been resolved: regulator: axp20x: AXP717: set rampdelay AXP717 datasheet says that regulator ramp delay is 15.625 us/step, which is 10mV in our case. Add a AXPDESCRANGESDELAY macro and update AXPDESCRANGES macro to expand to AXPDESCRANGESDELAY...
CVE-2024-53682
CVE-2024-53682 (Linux kernel) fixes a crash when CPU DVFS is used by patching the regulator AX P717 ramp_delay handling in axp20x, updating AXP_DESC_RANGES and AXP_DESC macros to set ramp_delay to 0, and adjusting ramp/step calculations for DCDC4. The issue stems from AXP717 ramp delay behavior (...
PT-2025-2977 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the regulator in the Linux kernel, specifically the axp20x driver for the AXP717. According to the AXP717 datasheet, the regulator ramp delay is 15.625 us/step, whic...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect rampdelay setting in the AXP717 voltage regulator, which causes a crash when using CPU DVFS...
How to select the best on-ramp and off-ramp for you?
Choosing the best on-ramp and off-ramp solutions is a key part of navigating the cryptocurrency landscape – to…...
Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program
Cybersecurity researchers have gleaned additional insights into a nascent ransomware-as-a-service RaaS called Cicada3301 after successfully gaining access to the group's affiliate panel on the dark web. Singapore-headquartered Group-IB said it contacted the threat actor behind the Cicada3301...
Selling Ransomware Breaches: 4 Trends Spotted on the RAMP Forum
The sale and purchase of unauthorized access to compromised enterprise networks has become a linchpin for cybercriminal operations, particularly in facilitating ransomware attacks. Underground forums are sharing guidelines on breaching networks and selling the access they obtain, leaving the...
Rebranded Knight Ransomware Targeting Healthcare and Businesses Worldwide
An analysis of a nascent ransomware strain called RansomHub has revealed it to be an updated and rebranded version of Knight ransomware, itself an evolution of another ransomware known as Cyclops. Knight aka Cyclops 2.0 ransomware first arrived in May 2023, employing double extortion tactics to...
ALPHV ransomware gang fakes own death, fools no one
For the second time in only four months, all is not well on the ALPHV aka BlackCat ransomware gangs dark web site. Gone are the lists of compromised victims. In their place, a veritable garden of law enforcement badges has sprouted beneath the ominous message "THIS WEBSITE HAS BEEN SEIZED." The...
SUSE CVE-2013-2001
Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function...
Malicious code in ramp-network (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dee9ba72be5809531f9de94a5e860446175b21a688347d12bfe9fb1db3aa4455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Wazawaka Goes Waka Waka
In January, KrebsOnSecurity examined clues left behind by "Wazawaka," the hacker handle chosen by a major ransomware criminal in the Russian-speaking cybercrime scene. Wazawaka has since "lost his mind" according to his erstwhile colleagues, creating a Twitter account to drop exploit code for a...
Dogged Persistence -- The Name of the Game for One DDoS Attacker
With DDoS, we typically observe a moderate degree of attacker persistence. DDoS attacks are relatively easy to launch from a number of online booter services, and the availability of cryptocurrencies for payment has made it easy to remain anonymous. Attackers can try their hand at DDoS for little...
Babuk Ransomware Gang Ransomed, New Forum Stuffed With Porn
The Babuk ransomware gang’s new rebrand isn’t going so well. It seems the cybercriminal group has been a victim of a ransomware attack of its own. Babuk’s latest endeavor, a Dark Web ransomware forum called RAMP, was crippled by a spammer over the weekend who overloaded the site with same-sex...
Friday Squid Blogging: Best Squid-Related Headline
From the New York Times: "When an Eel Climbs a Ramp to Eat Squid From a Clamp, Thats a Moray." The article is about the eel; the squid is just eel food. But still…. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posti...
CVE-2020-10372
Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI...
CVE-2020-10372
Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI...
CVE-2020-10372
The vulnerability is CVE-2020-10372 affecting Ramp AltitudeCDN Altimeter before 2.4.0. It allows an authenticated Stored XSS through the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI. This is the concrete impact described in multiple sources (inc...
