131 matches found
secretive
Secretive Secretive es una aplicación para proteger y gestionar claves SSH con el Enclave Seguro. ¿Por qué? Almacenamiento más seguro La configuración más común para las claves SSH es simplemente mantenerlas en el disco, protegidas por permisos adecuados. Esto está bien en la mayoría de los casos...
BrowserBox
BrowserBox by DOSAYGO 安全、现代的远程浏览器隔离（RBI），带来无客户端体验 阅读 BrowserBox 文档 → 🖥️ v18.10.0 新增 — BrowserBox 桌面应用 BETA BrowserBox 现在附带一个桌面应用，让你无需命令行即可运行 BrowserBox。 启动和停止会话，选择人们访问它的方式（直连、Cloudflare、Tor、ZeroTier 或 nginx），复制登录链接， 管理浏览器策略，并通过表单运行任何 bbx 命令，实时查看进度，一键获取完整输出。 在 Linux 主机上，Fleet...
lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296
CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon funciona a frecuencias que son armónicos de la proporción áurea de 587 kHz: · Núcleos de rendimiento: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · Núcleos de eficiencia: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · Motor neuronal: 11.0 G...
secretive v4.0.0
Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Resolved the race condition between SECS reclaiming and page fault for EAUG. The SGX EPC reclaimer ksgxd may reclaim the SECS EPC page for an enclave and set secs.epcpage to NULL. The SECS page is used for EAUG and ELDU ...
Astra Linux – Vulnerability in mbedtls
A issue was discovered in Arm Mbed TLS prior to version 2.23.0. Due to a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add a overflow check in sgxvalidateoffsetlength The sgxvalidateoffsetlength function verifies the "offset" and "length" arguments provided by the user space. However, there was a lack of an overflow check when these...
ios-imessage-zero-click-exploit
CVE-2025-31200/31201 - iOS Zero-Click iMessage Exploit Chai...
AppleSEPKeyStore Stress Tester / Fuzzer
This code is not a fully functional exploit, but rather a concurrency stress test and race-condition trigger targeting the Apple Secure Enclave key management driver AppleSEPKeyStore...
Exploit for Code Injection in Apple Securerom
🔐 iOS Security Research Deep-dive notes on iOS security inter...
MiracleLinux 7 : microcode_ctl-2.1-53.3.el7 (AXEA:2019-4383:06)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXEA:2019-4383:06 advisory. - Insufficient access control in protected memory subsystem for IntelR SGX for 6th, 7th, 8th, 9th Generation IntelR CoreTM Processor Families; Intel...
CVE-2021-28653
The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware...
CVE-2022-50720
In the Linux kernel, the following vulnerability has been resolved: x86/apic: Don't disable x2APIC if locked The APIC supports two modes, legacy APIC or xAPIC, and Extended APIC or x2APIC. X2APIC mode is mostly compatible with legacy APIC, but it disables the memory-mapped APIC interface in favor...
JLSEC-2025-201 An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15
An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that can get precise enough side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinate of the result of scalar multiplication by exploiting side...
JLSEC-2025-204 An issue was discovered in Arm Mbed TLS before 2.23.0
An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...
Astra Linux – Vulnerability in Intel Microcode
Improper buffer restrictions in the firmware of certain IntelR XeonR Processors with SGX enabled may allow a privileged user to potentially enable privilege escalation through local access...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: crypto: caam – Prevent crashes during suspension with iMX8QM/iMX8ULP Since the CAAM on these SoCs is managed by another ARM core, called the SECO Security Controller on iMX8QM and Secure Enclave on iMX8ULP. The SECO also reserves...
AEX-NStep: Probabilistic Interrupt Counting Attacks on Intel SGX
To mitigate interrupt-based stepping attacks notably using SGX-Step, Intel introduced AEX-Notify, an ISA extension to Intel SGX that aims to prevent deterministic single-stepping. In this work, we introduce AEX-NStep, the first interrupt counting attack on AEX-Notify-enabled Enclaves. We show tha...
