CVE-2026-53525

A flaw was found in WeeChat, a free chat client. The relay authentication mechanism uses a non-constant-time comparison when verifying password hashes. This vulnerability allows a remote attacker to exploit subtle timing differences during the authentication process. By analyzing these timing...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

Jump-over-ASLR-BTB

Branch-Prädiktoren & ASLR Autor: Byte Reaper Beschreibung Dieses Repository enthält eine C-Implementierung für Forschungszwecke, die Konzepte im Zusammenhang mit Branch-Prädiktoren, spekulativer Ausführung und Cache-basierten Seitenkanälen im Kontext der Address-Space-Layout-Randomization ASLR...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

mojo-v

Mojo-V: Calcolo Segreto per RISC-V Mojo-V pronunciato “mojo-five” è una nuova estensione RISC-V che introduce capacità di programmazione orientate alla privacy per RISC-V. Mojo-V implementa il calcolo segreto, consentendo un'esecuzione sicura, efficiente e data-oblivious senza affidarsi a softwar...

TID-The-Instant-Destroyer

TID — The Instant Destroyer Ricerca di sicurezza indipendente nel campo della protezione dagli attacchi side-channel basati sulla cache. Panoramica TID è un protocollo specializzato progettato per eliminare i residui di dati sensibili come le chiavi crittografiche dai livelli di cache della CPU...

CVE-2026-8794

CVE-2026-8794 — Enumerazione degli Username tramite Canale Laterale di Temporizzazione nell'Autenticazione di PaperCut NG Campo| Dettagli ---|--- ID CVE| CVE-2026-8794 Prodotto| PaperCut NG Versione interessata| 25.0.11 Build 75758 e precedenti CWE| CWE-208 — Discrepanza di Temporizzazione...

prefetch-tool

Strumento Prefetch KASLR per Windows Uno strumento proof-of-concept per bypassare KASLR ASLR del kernel su Windows 11. Ispirato da EntryBleed per Linux. Questo strumento è stato sviluppato come parte di un exploit che ha come target Windows 11 24H2. Non sono affatto un esperto di canali laterali,...

CVE-2026-74961

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Side-channel in the Web Audio component...

CVE-2026-74954

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure due to side-channel in the Storage: Cache API component...

SUSE CVE-2026-74954

Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-44255 Wazuh: Username Enumeration via Timing Side-Channel

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AuthenticationManager.checkuser in framework/wazuh/rbac/orm.py performs checkpasswordhash only when the supplied username exists. A nonexistent username returns...

mmiotic

mmiotic Uno strumento esplorativo per il timing di MMIO — cronometra qualsiasi indirizzo fisico e disseziona l' hardware dalla latenza. Sorprendentemente utile per il reverse engineering dell'hardware, il fingerprinting degli hypervisor, l'analisi dell'attività dei dispositivi tramite canali...

spectre-attack

Exemplo de Ataque Spectre Exemplo de uso do exploit "Spectre" revelado em 2 de janeiro de 2018 CVE-2017-5753 e CVE-2017-5715 O Spectre quebra o isolamento entre diferentes aplicações. Ele permite que um atacante engane programas livres de erros, que seguem as melhores práticas, fazendo-os vazar...

CVE-2026-74954

Information disclosure due to side-channel in the Storage: Cache API c...

UBUNTU-CVE-2026-74954

Information disclosure due to side-channel in the Storage: Cache API c...

Linux Distros Unpatched Vulnerability : CVE-2026-74954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154,...

UBUNTU-CVE-2026-74961

Side-channel in the Web Audio component. This vulnerability was fixed...

Linux Distros Unpatched Vulnerability : CVE-2026-74961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. CVE-2026-74961...

CVE-2026-74961

Side-channel in the Web Audio component. This vulnerability was fixed...