AVX-Side-Channel

قناة جانبية توقيتية قائمة على AVX — كشف ASLR المؤلف: Byte Reaper الوصف نص برمجي يوضح كشف ASLR باستخدام تحميل ذاكرة AVX + توقيت RDTSCP وكشف SIGSEGV اختياري. المتطلبات : Linux x8664 مترجم GCC مع -mavx2 معالج يدعم AVX2 و RDTSCP التجميع : gcc -mavx2 -O2 file.c -o AVX-Side-Channel ./AVX-Side-Channel...

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

Canal Caché Combiné : CVE-2023-1206 + CVE-2024-49882 Présentation Ce projet démontre un canal de communication caché exploitant deux vulnérabilités du noyau Linux : Composant| CVE| Objectif ---|---|--- Canal de synchronisation| CVE-2023-1206| Synchronisation d'horloge via le timing de collision d...

CVE-2026-8794

CVE-2026-8794 — Перечисление имён пользователей через побочный канал по времени аутентификации в PaperCut NG Field| Details ---|--- CVE ID| CVE-2026-8794 Продукт| PaperCut NG Затронутая версия| 25.0.11 Build 75758 и более ранние CWE| CWE-208 — Наблюдаемое расхождение во времени CVSS Score| 3.7...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – Побочный канал по времени в постквантовом KEM декапсуляция Kyber Обзор Уязвимая реализация декапсуляции KEM Kyber раскрывает биты секретного ключа через различия во времени выполнения этапа отклонения шифротекста, что позволяет полностью восстановить ключ. Критичность:...

CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

ssh-enum

ssh-enum دراسة التحقق الإحصائي لـ CVE-2016-6210 إعادة تحقيق قابلة للتكرار لاستخراج أسماء المستخدمين في OpenSSH باستخدام التحليل الإحصائي. يعيد هذا المشروع تحقيق CVE-2016-6210 ، وهو قناة جانبية زمنية موثقة في OpenSSH، لتحديد ما إذا كانت لا تزال قابلة للملاحظة على خادم Ubuntu حديث باستخدام تكوين PA...

Linux Distros Unpatched Vulnerability : CVE-2026-18036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4413-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4413-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4412-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4412-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:4414-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4414-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-35191: QUIC...

CVE-2026-18036

A flaw was found in Bouncy Castle. A timing side-channel vulnerability in the NTRU algorithm can lead to information disclosure. The implementation performs variable-time division operations on secret data instead of constant-time calculations, causing processing time to vary depending on the...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...

DEBIAN-CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

UBUNTU-CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

EUVD-2026-91317

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

CVE-2026-18036

Bouncy Castle for Java versions prior to 1.86 are vulnerable to a timing side-channel attack in the NTRU implementation. The root cause is the use of the % operator in three helpers, leading to integer division where latency depends on the secret operand. Specifically, Polynomial.modQ divides by ...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted bsc1280590. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for...

SUSE-SU-2026:4414-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted bsc1280590. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...

SUSE-SU-2026:4413-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75805: NULL Pointer Dereference in CMP Client...