2691 matches found
CVE-2021-29155
これはCVE-2021-29155の概念実証コードです。 投機的実行領域におけるポインタ演算の範囲追跡システムは不十分でした。 サイドチャネル経由でカーネルデータを抽出することが可能でした。 これは概念実証であり、マップの最後の要素から先へ最大0x5fffバイトの範囲外読み取りができます。 この問題は5.12で修正され（https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/kernel/bpf/verifier.c?id=7fedb63a8307dda0ec3b8969a3b233a1dd7ea8...
CVE-2021-33624
Prueba de Concepto para CVE-2021-33624 compilar con gcc -pthread -o bpfspectretypeconfusion bpfspectretypeconfusion.c -Wall -ggdb -std=gnu99 ejecutar con sudo ./bpfspectretypeconfusion 1 2 ffffffffa4925620 0x10 donde 1 y 2 son hilos de CPU que se ejecutan en dos núcleos de hardware distintos,...
CVE-2023-0045
Evadiendo las mitigaciones de Spectre-BTI en el espacio de usuario de Linux Este es un documento de trabajo; por favor, envíenos sus comentarios si cree que nos equivocamos en algo o si omitimos alguna cita Versión 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introducción Al probar la tasa de...
exploit-cve-2017-5715
Ataque Spectre Spectre rompe el aislamiento entre diferentes aplicaciones. Permite a un atacante engañar a programas sin errores, que siguen las mejores prácticas, para que filtren sus secretos. De hecho, las comprobaciones de seguridad de dichas mejores prácticas aumentan la superficie de ataque...
Spectre-Vulnerability-CVE-2017-5753-
Spectre-Vulnerability-CVE-2017-5753- يحتوي هذا المستودع على تقرير حول ثغرة Specre وتفاصيل حول استغلال الثغرة. تم اقتباس إثبات المفهوم المستخدم لهذا الغرض من مستودع GitHub https://github.com/Eugnis/spectre-attack . في الأصل، كان الكود مأخوذاً من تقرير صادر عن Graz University of technology...
In-Spectre-Meltdown
In-Spectre-Meltdown Dieses Tool ermöglicht die Überprüfung von Angriffen auf die spekulative Ausführung Side-Channel-Angriffe, die viele moderne Prozessoren und Betriebssystemdesigns betreffen. CVE-2017-5754 Meltdown und CVE-2017-5715 Spectre ermöglichen unprivilegierten Prozessen, Geheimnisse vo...
CVE-2023-0045
लिनक्स पर Spectre-BTI उपयोगकर्ता स्थान शमन को बायपास करना यह एक कार्यशील दस्तावेज़ है, यदि आपको लगता है कि हमने कुछ गलत समझा है या हम एक उद्धरण चूक गए हैं तो कृपया हमें प्रतिक्रिया भेजें संस्करण 1.0 José Oliveira esoj Rodrigo Branco BSDaemon परिचय Spectre-BTI हमलों की सफलता दर का परीक्षण करते समय...
SpecuCheck
SpecuCheck SpecuCheck è un'utilità Windows per verificare lo stato delle mitigazioni software e hardware contro CVE-2017-5754 Meltdown, CVE-2017-5715 Spectre v2, CVE-2018-3260 Foreshadow e CVE-2018-3639 Spectre v4. Utilizza due nuove classi di informazioni aggiunte alla chiamata API...
spectre-meltdown-checker
Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list...
spectre-meltdown-checker
Spectre & Meltdown Checker Uno script shell autonomo per valutare la resilienza del tuo sistema contro le diverse CVE di esecuzione transitoria pubblicate dall'inizio del 2018, e fornire indicazioni su come mitigarle. Elenco CVE...
cve-2017-5753
CVE-2017-5753 CVE-2017-5753, Spectre, PoC, C, ASM per OSX, MAC, architettura Intel Compila: gcc -o a.out spectre.c Output: 0x41414141 Aggiunto anche l'output del flusso di controllo da Hopper.app per chi apprende visivamente Puoi regolare la dimensione del junk e ottenere letture più affidabili A...
Hardware-Vulnerability-with-Proof-of-Concept-
🛡️ Spectre Variant 2 CVE-2017-5715 — Ricerca sulle Vulnerabilità Hardware Un documento di ricerca approfondito e una Proof-of-Concept PoC pratica che esplorano gli attacchi a esecuzione speculativa sulle CPU moderne. 📖 Panoramica Questo progetto è un'esplorazione teorica e di laboratorio di Spectr...
CiscoSpectreTakeover
CiscoSpectreTakeover Un exploit a catena PoC che usa il recente exploit Cisco SMP CVE-2017-6736 per concatenare Spectre CVE-2017-5753 e CVE-2017-5715 Crediti Sottomodulo dell'exploit RCE Cisco di artkond: https://github.com/artkond/cisco-snmp-rce POC JS Spectre per Chrome di ascendr:...
spectre-attack-demo
Beispiel für einen Spectre-Angriff Beispiel für die Nutzung des aufgedeckten "Spectre"-Exploits vom 2. Januar 2018 CVE-2017-5753 und CVE-2017-5715 Spectre durchbricht die Isolierung zwischen verschiedenen Anwendungen. Es erlaubt einem Angreifer, fehlerfreie Programme, die Best Practices befolgen,...
meltdown-spectre-bios-list
Elenco aggiornamenti BIOS/Firmware per Meltdown/Spectre Questa è una lista di tutti i prodotti e produttori che hanno applicato patch a BIOS/Firmware per affrontare le vulnerabilità Meltdown e Spectre Se hai informazioni migliori, invia pull request. Perché l'ho fatto? per avere un elenco...
CVE-2018-3639-specter-v4-
CVE-2018-3639-specter-v4 spectre v4 : Speculative Store Bypass CVE-2018-3639 proof of concept for Linux build: gcc spectre-v4.cpp -o spectre run: ./spectre result: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low than threshold:1...
spectre-attack-example
Esempio di attacco Spectre 2 gennaio 2018 CVE-2017-5753 e CVE-2017-5715 Esempio di sfruttamento della vulnerabilità Spectre "fantasma" Cos'è questo? Mettiamo il testo "The Magic Words are Squeamish Ossifrage." in memoria, e poi proviamo a leggerlo sfruttando la vulnerabilità. Se il sistema è...
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 that's targeting Windows and Linux web servers globally across the education, media, technology, and gaming sectors. The vast majority of the targets are located in Brazil, Bolivia, China,...
CVE-2026-74683
In the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetching event masks The user-supplied event type index passed to EVIOCGMASK / EVIOCSMASK ioctls is used to index the static counts array in evdevgetmaskcnt and client evmasks array i...