CVE-2018-3639

CVE-2018-3639 Linux용 추측적 저장 우회 CVE-2018-3639 개념 증명 다운로드 root@kitploit: git clone [email protected]:mmxsrup/CVE-2018-3639.git 빌드 root@kitploit: cd CVE-2018-3639 make 실행 root@kitploit: ./specter 출력 root@kitploit: $ ./spectre idx: 0, highest:P, hitrate:21.340000 idx: 1, highest:A,...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – 포스트퀀텀 KEM 타이밍 부채널 Kyber 역캡슐화 개요 Kyber KEM 역캡슐화의 취약한 구현은 암호문 거부 단계의 타이밍 차이를 통해 비밀 키 비트를 유출하여 전체 키 복구를 가능하게 합니다. 심각도: 치명적 개인 키 손상 취약한 서버 C 및 공격 스크립트 Python root@kitploit: // kybervulndecaps.c - Simulated vulnerable Kyber decapsulation include include include include // Secret key...

VulnCheck KEV: CVE-2017-5753

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis...

SPOILER

SPOILER: 추측적 로드 해저드가 Rowhammer 및 캐시 공격을 강화한다 CVE-2019-0162 INTEL-SA-00238 https://www.usenix.org/system/files/sec19-islam.pdf root@kitploit: @inproceedings 236252, author = Saad Islam and Ahmad Moghimi and Ida Bruhns and Moritz Krebbel and Berk Gulmezoglu and Thomas Eisenbarth and Berk Sunar, tit...

CVE-2026-42527

허용적인 기본 ObjectInputFilter — DNS 사이드 채널 재현기 CVE-2026-42527 이 프로젝트는 Apache Camel의 CVE-2026-42527 을 시연합니다. 여러 Camel 구성 요소가 심층 방어 역직렬화 필터링을 위해 제공하는 기본 ObjectInputFilter 패턴 — java.;javax.;org.apache.camel.;! — 은 재귀적 java. 글로브를 사용하며, 이는 java.net.URL을 허용합니다. java.net.URL.hashCode는 URL 호스트의 DNS 조회를 수행하므로...

CVE-2019-5489

CVE 2019-5489 이 저장소에는 Linux용 Page Cache Side Channel AttacksCVE-2019-5489 개념 증명PoC 코드가 포함되어 있습니다. 페이지 캐시 부채널을 평가하기 위해, 두 프로세스 간에 은닉 채널covert channel을 구현했습니다. 송신 프로세스는 페이지 캐시 부채널을 통해 수신 프로세스로 기밀 데이터를 보냅니다. 페이지 캐시 공격은 Linux 커널 5.0부터 완화되었으므로, 이 PoC는 Linux 커널 5.0 이전에서만 동작합니다. 참고: Ubuntu 18.04, Linux...

CVE-2026-18796 QSPI flash encryption side-channel leakage

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme...

CVE-2026-18796 QSPI flash encryption side-channel leakage

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme...

CVE-2020-16012-PoC

CVE-2020-16012 | 사이드 채널 공격 이 저장소는 Firefox와 Chromium의 CanvasRenderingContext2D.drawImage 구현에서 확인된 사이드 채널 취약점인 CVE-2020-16012 에 대한 개념 증명PoC을 포함하고 있습니다. 이 프로젝트는 석사 2학년M2 과정 중 6명의 학생 팀이 협력하여 진행했습니다. 클라이언트 Chrome 버전 83 설치 링크...

Security update for apr-util

This update for apr-util fixes the following issues: CVE-2022-25147: buffer overflow possible with specially crafted input bsc1207866. CVE-2025-49506: leaking content via side channel timing attack bsc1274237. CVE-2026-32327: XML stack recursion crash bsc1274235. CVE-2026-34191: SQL Injection via...

SUSE-SU-2026:3938-1 Security update for apr-util

This update for apr-util fixes the following issues: - CVE-2022-25147: buffer overflow possible with specially crafted input bsc1207866. - CVE-2025-49506: leaking content via side channel timing attack bsc1274237. - CVE-2026-32327: XML stack recursion crash bsc1274235. - CVE-2026-34191: SQL...

Security update for apr-util

This update for apr-util fixes the following issues: CVE-2022-25147: buffer overflow possible with specially crafted input bsc1207866. CVE-2025-49506: leaking content via side channel timing attack bsc1274237. CVE-2026-32327: XML stack recursion crash bsc1274235. CVE-2026-34191: SQL Injection via...

Linux Distros Unpatched Vulnerability : CVE-2026-84308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php...

CVE-2026-59276

Several components in Spring Security compare security-sensitive values using standard string equality String.equals rather than a constant-time comparison. Because String.equals returns as soon as it finds a differing character, the time taken to reject an incorrect value is proportional to the...

CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

DEBIAN-CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84308

phpseclib , a PHP secure communications library, has a non-constant-time X25519 scalar multiplication flaw in versions prior to 3.0.57 and 4.0.1 . The root cause is data-dependent conditional modular reductions in the pure-PHP implementation (Math/PrimeField/Integer.php), which leak per-step timi...