740 matches found
IoT-Pentest-devices-and-purpose
Dispositivi per Pentest IoT e Loro Scopo - Edizione 2025 Questo documento elenca i più recenti strumenti e hardware per i test di sicurezza IoT nel 2025, coprendo diversi protocolli e tecnologie. Include attacchi all'avanguardia, vulnerabilità scoperte di recente, e strumenti hardware e software...
In-Spectre-Meltdown
In-Spectre-Meltdown Questo strumento consente di verificare gli attacchi side-channel di esecuzione speculativa che colpiscono molti processori moderni e progetti di sistemi operativi. CVE-2017-5754 Meltdown e CVE-2017-5715 Spectre consentono a processi non privilegiati di rubare segreti da...
sgx-step
A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...
TID-The-Instant-Destroyer
TID — The Instant Destroyer Ricerca di sicurezza indipendente nel campo della protezione dagli attacchi side-channel basati sulla cache. Panoramica TID è un protocollo specializzato progettato per eliminare i residui di dati sensibili come le chiavi crittografiche dai livelli di cache della CPU...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Prior to version 3.21 of GitHub Enterprise Server, there was a security...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error during the intra-handshake attestation.. An attacker can impersonate a trusted service endpoint and gain unauthorized access to sensitive data or operations by extracting the ephemeral TLS private key through...
Red-Teaming Claude Opus and ChatGPT-Based Security Advisors for Trusted Execution Environments
Trusted Execution Environments TEEs e.g., Intel SGX and ArmTrustZone aim to protect sensitive computation from a compromised operating system, yet real deployments remain vulnerable to microarchitectural leakage, side-channel attacks, and fault injection. In parallel, security teams increasingly...
Trojan-Resilient NTT: Protecting against Control Flow and Timing Faults on Reconfigurable Platforms
Number Theoretic Transform NTT is the most essential component for polynomial multiplications used in lattice-based Post-Quantum Cryptography PQC algorithms such as Kyber, Dilithium, NTRU etc. However, side-channel attacks SCA and hardware vulnerabilities in the form of hardware Trojans may alter...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003848)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003848 advisory. kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of...
CVE-2022-26382
While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts. Side-channel attacks on the text by using specially crafted fonts could have lead to this text being inferred by the webpage. This vulnerability affects Firefox 98...
CVE-2019-18222
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks...
Navigating the Dual-Use Nature and Security Implications of Reconfigurable Intelligent Surfaces in Next-Generation Wireless Systems
Reconfigurable intelligent surface RIS technology offers significant promise in enhancing wireless communication systems, but its dual-use potential also introduces substantial security risks. This survey explores the security implications of RIS in next-generation wireless networks. We first...
EUVD-2019-6640
Malware in sbrugna...
EUVD-2019-9548
Malware in sbrugna...
EUVD-2020-5192
Malware in sbrugna...
EUVD-2013-0208
Malware in sbrugna...
EUVD-2019-7407
Malware in sbrugna...
EUVD-2017-4735
Malware in sbrugna...