740 matches found
In-Spectre-Meltdown
In-Spectre-Meltdown This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 Meltdown and CVE-2017-5715 Spectre allows unprivileged processes to steal secrets from privileged processes. These attacks prese...
sgx-step
A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...
IoT-Pentest-devices-and-purpose
أجهزة اختبار الاختراق للأشياء المتصلة IoT والغرض منها - إصدار 2025 تستعرض هذه الوثيقة أحدث الأدوات والأجهزة لاختبار أمان إنترنت الأشياء في عام 2025، وتغطي بروتوكولات وتقنيات مختلفة. وهي تتضمن هجمات متطورة، وثغرات أمنية مكتشفة حديثًا، وأجهزة وأدوات برمجية محدثة بقدرات محسّنة. جدول المحتويات بلوتوث...
TID-The-Instant-Destroyer
TID — The Instant Destroyer Independent security research in the field of protection against cache-based side-channel attacks. Overview TID is a specialized protocol designed to eliminate sensitive data remnants such as cryptographic keys from CPU cache layers $L1, L2, \text and L3$ immediately...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Prior to version 3.21 of GitHub Enterprise Server, there was a security...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error during the intra-handshake attestation.. An attacker can impersonate a trusted service endpoint and gain unauthorized access to sensitive data or operations by extracting the ephemeral TLS private key through...
Red-Teaming Claude Opus and ChatGPT-Based Security Advisors for Trusted Execution Environments
Trusted Execution Environments TEEs e.g., Intel SGX and ArmTrustZone aim to protect sensitive computation from a compromised operating system, yet real deployments remain vulnerable to microarchitectural leakage, side-channel attacks, and fault injection. In parallel, security teams increasingly...
Trojan-Resilient NTT: Protecting against Control Flow and Timing Faults on Reconfigurable Platforms
Number Theoretic Transform NTT is the most essential component for polynomial multiplications used in lattice-based Post-Quantum Cryptography PQC algorithms such as Kyber, Dilithium, NTRU etc. However, side-channel attacks SCA and hardware vulnerabilities in the form of hardware Trojans may alter...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003848)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003848 advisory. kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of...
CVE-2022-26382
While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts. Side-channel attacks on the text by using specially crafted fonts could have lead to this text being inferred by the webpage. This vulnerability affects Firefox 98...
CVE-2019-18222
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks...
Navigating the Dual-Use Nature and Security Implications of Reconfigurable Intelligent Surfaces in Next-Generation Wireless Systems
Reconfigurable intelligent surface RIS technology offers significant promise in enhancing wireless communication systems, but its dual-use potential also introduces substantial security risks. This survey explores the security implications of RIS in next-generation wireless networks. We first...
EUVD-2019-6640
Malware in sbrugna...
EUVD-2013-0208
Malware in sbrugna...
EUVD-2020-5192
Malware in sbrugna...
EUVD-2019-9548
Malware in sbrugna...
EUVD-2019-7407
Malware in sbrugna...
EUVD-2020-19694
Malware in sbrugna...