New SPECTRALVIPER Backdoor Targeting Vietnamese Public Companies

Vietnamese public companies have been targeted as part of an ongoing campaign that deploys a novel backdoor called SPECTRALVIPER. "SPECTRALVIPER is a heavily obfuscated, previously undisclosed, x64 backdoor that brings PE loading and injection, file upload and download, file and directory...

Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations

Summary HashiCorp Vault’s implementation of Shamir’s secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space...

Malicious code in seal_online_node_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bf0243aa25b356dbd5d2f2018019d81b39aa0ce936772bd7aa1761a1c306b85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Researchers Demonstrate New Side-Channel Attack on Homomorphic Encryption

A group of academics from the North Carolina State University and Dokuz Eylul University have demonstrated what they say is the "first side-channel attack" on homomorphic encryption that could be exploited to leak data as the encryption process is underway. "Basically, by monitoring power...

Tongda2000 SQL Injection Vulnerability

Tongda2000 is a web-based intelligent office system from China Tongda Tongda.A security vulnerability exists in Tongda2000 v11.10, which allows attackers to attack via the DEVICELIST parameter in /mobileseal/getseal.php. No detailed vulnerability details are available at this time...

CVE-2022-24206

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobileseal/getseal.php via the DEVICELIST parameter...

Tongda2000 安全漏洞

Tongda2000 is a web-based intelligent office system from China Tongda Tongda.A security vulnerability exists in Tongda2000 v11.10, which allows attackers to attack via the DEVICELIST parameter in /mobileseal/getseal.php. No detailed vulnerability details are available at this time...

PT-2022-16538 · Unknown · Tongda2000

Name of the Vulnerable Software and Affected Versions: Tongda2000 version 11.10 Description: A SQL injection issue was found in the /mobile seal/get seal.php endpoint via the DEVICE LIST parameter. This allows for potential exploitation of the software. Recommendations: For Tongda2000 version...

GSD-2021-1000041 KEYS: trusted: Fix TPM reservation for seal/unseal

KEYS: trusted: Fix TPM reservation for seal/unseal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

PT-2024-11059 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.33 and 5.11.17 Description: The issue is related to the KEYS: trusted: Fix TPM reservation for seal/unseal in the Linux kernel. The original patch was correct but got rebased, causing the loss of tpm try ge...

Command Execution Vulnerability in the Seal Monitoring Management System of Beijing Huilang Times Technology Company Limited (CNVD-2021-10517)

Beijing Huilang Times Technology Co., Ltd. was founded in 2005, is a national high-tech enterprises and dual-soft certified enterprises, the products are a little bit of banknote detectors, seal monitoring and management equipment, automatic check printers, financial binding machines and other...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

Design/Logic Flaw

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

CVE-2021-3006

The CVE-2021-3006 entry concerns the Seal Finance (Seal) Ethereum token. The breed function in its smart contract lacks access control, enabling price manipulation. Exploitation occurred in the wild during December 2020 and January 2021. The available documents confirm the root cause (unauthorize...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

Seal Finance Farm Security Breach

Seal Finance Farm is a network protocol used by the Seal Finance community to support decentralized trading.SEAL An experimental protocol that acts as an intermediary between the main DeFi protocol tokens, creating deeper liquidity between the two Seal Finance Farm has a security vulnerability. T...

Memory Corruption Vulnerability in Electronic Seal System of CommuniLink Wisdom Security Technology Limited (CNVD-2020-64528)

Ltd. was established in August 2007, the scope of business includes: technology development, technology consulting, technology services, technology transfer, technology training and so on. There is a memory corruption vulnerability in the electronic seal system of CommuniLink Wisdom Security...

Memory Corruption Vulnerability in Electronic Seal System of CommuniLink Wisdom Security Technology Co. Ltd (CNVD-2020-64622)

Ltd. was established in August 2007, the scope of business includes: technology development, technology consulting, technology services, technology transfer, technology training and so on. The electronic seal system of CommuniLink Wisdom Security Technology Co., Ltd. has a memory corruption...

Memory Corruption Vulnerability in Electronic Seal System of Unicom Intelligent Security Technology Co.

Ltd. was established in August 2007, the scope of business includes: technology development, technology consulting, technology services, technology transfer, technology training and so on. The electronic seal system of CommuniLink Wisdom Security Technology Co., Ltd. has a memory corruption...