225 matches found
riscv-isa-sim
Spike RISC-V ISA Simulator About Spike, the RISC-V ISA Simulator, implements a functional model of one or more RISC-V harts. It is named after the golden spike used to celebrate the completion of the US transcontinental railway. Spike supports the following RISC-V ISA features: RV32I and RV64I ba...
mojo-v
Mojo-V: Secret Computation for RISC-V Mojo-V pronounced “mojo-five” is a new RISC-V extension that introduces privacy-oriented programming capabilities for RISC-V. Mojo-V implements secret computation, enabling secure, efficient, and data-oblivious execution without reliance on fragile software a...
CVE-2003-0264_EXPLOIT
CVE-2003-0264EXPLOIT Buffer Overflow in Seattle Lab Mail SLmail 5.5 - POP3 Simple STACK BAsed BUffer Overflow Step By Step 1 FUZZ The Application In the very First Step we will Fuzz The Application With a Simple Spike Script meanwhile we wil also have SLmail attachedand running to immunity Debugg...
hcon2026hwctf
Hardware Hacking CTF hcon2026hwctf If you’re into hardware CTFs, here’s the first public challenge from HC0N CTF 2026 featuring RISC-V RP2350 exploitation challenges low level We’ve tried to make the challenge not too elitist or difficult, so that the hundreds of conference participants have a...
CVE-2022-38725
CVE-2022-38725 CVE-2022-38725 is an unauthenticated Denial of Service vulnerability in syslog-ng versions prior to 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Steps to Reproduce 1. Pull a vulnerable docker...
Astra Linux – Vulnerability in Linux
A remote denial-of-service vulnerability was discovered in the Linux kernel’s TIPC kernel module. The while loop in tipclinkxmit encounters an unknown state while attempting to parse SKBs that are not present in the queue. Sending two small UDP packets to a system with a UDP interface causes the...
The vulnerability of the Microchip SAMA5D4 microcontroller lies in its improper protection against voltage spikes and clock frequency fluctuations, allowing attackers to execute arbitrary code.
The vulnerability of the Microchip SAMA5D4 microcontroller is related to improper protection against voltage spikes and clock frequency fluctuations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100532)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100532 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When...
mojo-v mojov-v1.03
Mojo-V: Secret Computation for RISC-V Mojo-V pronounced “mojo-five” is a new RISC-V extension that introduces privacy-oriented programming capabilities for RISC-V. Mojo-V implements secret computation, enabling secure, efficient, and data-oblivious execution without reliance on fragile software a...
io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing
A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service DoS...
Security Bulletin: IBM WebSphere Automation is vulnerable to multiple CVEs affecting multiple mongo packages within MongoDB
Summary IBM WebSphere Automation is vulnerable to multiple CVEs affecting the mongod, mongodb & mongos packages within MongoDB. Vulnerability Details CVEID:CVE-2026-8053 DESCRIPTION: An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database writ...
PT-2026-63478
Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An unauthenticated remote client can cause excessive CPU consumption on a server by sending a specific combination of parameters to the hello command in exhaust mode. The server's handling of...
EUVD-2025-210181
Unauthenticated Local File Inclusion in Spike = 1.2 versions...
CVE-2025-69168
Unauthenticated Local File Inclusion in Spike = 1.2 versions...
CVE-2025-69168: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Spike = 1.2 versions...
CVE-2025-69168 WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Spike = 1.2 versions...
CVE-2025-69168 WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Spike = 1.2 versions...
CVE-2025-69168
CVE-2025-69168 affects the WordPress Spike theme up to version 1.2, with an unauthenticated Local File Inclusion vulnerability. The entry notes LFI without authentication, implying an attacker could access local files. The CVSS 3.1 data (Patchstack) assigns a base score of 8.1 (HIGH) with NETWORK...
WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Spike versions = 1.2...
PT-2026-43064
Name of the Vulnerable Software and Affected Versions hackney versions 2.0.0-beta.1 through 4.0.0 Description An infinite loop exists in the Alt-Svc response header parser within src/hackney altsvc.erl. When the parse token/2 function receives a byte that is not a token, whitespace, or comma such...