123 matches found
secretive
Secretive Secretive es una aplicación para proteger y gestionar claves SSH con el Enclave Seguro. ¿Por qué? Almacenamiento más seguro La configuración más común para las claves SSH es simplemente mantenerlas en el disco, protegidas por permisos adecuados. Esto está bien en la mayoría de los casos...
BrowserBox
DOSAYGO 出品的 BrowserBox 安全、现代的远程浏览器隔离 RBI，提供无客户端体验 🔐 v18.0.1 新功能 — macOS 上的通行密钥认证： 使用真实的通行密钥登录远程浏览器中的网站。 通行密钥在 Mac 的安全隔区中创建和存储，并通过 Touch ID 解锁，借助 BrowserBox Passkeys 辅助工具 — 这是一个由 BrowserBox 在网站请求通行密钥时提示您下载的小型签名并公证的应用。您的密钥永远不会离开设备。 💻 在终端中尝试 — 通过 KRNL 通过 SSH 访问 BrowserBox： ssh krnl.duetbrowser.com...
lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296
CTT-Apple-Silicon--共振漏洞-CVE-2024-23296 Apple Silicon 以 587 kHz 的黄金比例谐波频率运行： · 性能核心：3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · 能效核心：2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · 神经引擎：11.0 GHz = 587 kHz × 18739 ≈ φ¹⁰ × 1000 · 全部都是 587 kHz 的 φ 谐波 Apple Silicon α 共振漏洞 CVE-2024-23296 概述 这项研究利用收敛时间理论（CTT）原理，展示了...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add a overflow check in sgxvalidateoffsetlength The sgxvalidateoffsetlength function verifies the "offset" and "length" arguments provided by the user space. However, there was a lack of an overflow check when these...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Resolved the race condition between SECS reclaiming and page fault for EAUG. The SGX EPC reclaimer ksgxd may reclaim the SECS EPC page for an enclave and set secs.epcpage to NULL. The SECS page is used for EAUG and ELDU ...
ios-imessage-zero-click-exploit
CVE-2025-31200/31201 - iOS Zero-Click iMessage Exploit Chai...
Astra Linux – Vulnerability in mbedtls
A issue was discovered in Arm Mbed TLS prior to version 2.23.0. Due to a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...
AppleSEPKeyStore Stress Tester / Fuzzer
This code is not a fully functional exploit, but rather a concurrency stress test and race-condition trigger targeting the Apple Secure Enclave key management driver AppleSEPKeyStore...
Exploit for Code Injection in Apple Securerom
🔐 iOS Security Research Deep-dive notes on iOS security inter...
MiracleLinux 7 : microcode_ctl-2.1-53.3.el7 (AXEA:2019-4383:06)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXEA:2019-4383:06 advisory. - Insufficient access control in protected memory subsystem for IntelR SGX for 6th, 7th, 8th, 9th Generation IntelR CoreTM Processor Families; Intel...
CVE-2021-28653
The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware...
CVE-2022-50720
In the Linux kernel, the following vulnerability has been resolved: x86/apic: Don't disable x2APIC if locked The APIC supports two modes, legacy APIC or xAPIC, and Extended APIC or x2APIC. X2APIC mode is mostly compatible with legacy APIC, but it disables the memory-mapped APIC interface in favor...
JLSEC-2025-201 An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15
An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that can get precise enough side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinate of the result of scalar multiplication by exploiting side...
JLSEC-2025-204 An issue was discovered in Arm Mbed TLS before 2.23.0
An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...
Astra Linux – Vulnerability in Intel Microcode
Improper buffer restrictions in the firmware of certain IntelR XeonR Processors with SGX enabled may allow a privileged user to potentially enable privilege escalation through local access...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: crypto: caam – Prevent crashes during suspension with iMX8QM/iMX8ULP Since the CAAM on these SoCs is managed by another ARM core, called the SECO Security Controller on iMX8QM and Secure Enclave on iMX8ULP. This core also reserve...
AEX-NStep: Probabilistic Interrupt Counting Attacks on Intel SGX
To mitigate interrupt-based stepping attacks notably using SGX-Step, Intel introduced AEX-Notify, an ISA extension to Intel SGX that aims to prevent deterministic single-stepping. In this work, we introduce AEX-NStep, the first interrupt counting attack on AEX-Notify-enabled Enclaves. We show tha...
EUVD-2020-29775
Malware in sbrugna...