China Telecom Corporation EPON Tianyi Gateway ZXHN F450 安全漏洞

The China Telecom Epon Tianyi Gateway ZXHN F450 is a hardware terminal of the "Optical Cat Smart Router" from China Telecom Corporation China Telecom. A security vulnerability exists in the China Telecom Corporation EPON Tianyi Gateway ZXHN F450 that originates from a denial of service issue in t...

Mediatek 芯片 资源管理错误漏洞

Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chips, which stems from a possible memory corruption due to the use of m4u after its release, which could result in a local elevation of privilege that requires system execution...

CVE-2021-25462

NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...

Samsung NPU driver 代码问题漏洞

Samsung NPU driver is a neural network processor from Samsung South Korea. A security vulnerability exists in Samsung NPU driver, which arises from improper design or implementation during code development of a networked system or product...

Jest Mocks—Unit Testing for EdgeWorkers

In case you haven’t already been working with EdgeWorkers, it allows you to run JavaScript code across more than 4,200 locations for proximity to users and fast application response times. With more and more application functionality moving to the edge, it’s increasingly important to ensure that...

Util PHP eval-stdin.php PHPUnit PHP Code Execution

The vulnerability of the Util/PHP/eval-stdin.php component of the PHPUnit framework is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary PHP code using a specially crafted HTTP POST request...

Modicon BMXNOR0200H Privilege Escalation

The vulnerability of the RTU module’s microprogramming software, Modicon BMXNOR0200H, is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker operating remotely to enhance their privileges...

hw: Fast forward store predictor

A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU...

hw: Fast forward store predictor

A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU...

hw: Fast forward store predictor

A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that can be...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that can be...

hw: Fast forward store predictor

A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU...

ISC BIND 处理逻辑错误漏洞

ISC BIND is a suite of open source software from ISC that implements the DNS protocol. A Processing Logic Error vulnerability exists in ISC BIND, which originates when named attempts to respond via UDP with a response larger than the currently valid interface's Maximum Transmission Unit MTU and...

WordPress Sites Abused in Aggah Spear-Phishing Campaign

Threat actors are using compromised WordPress websites to target manufacturers across Asia with a new spear-phishing campaign that delivers the Warzone RAT, a commodity infostealer available widely for purchase on criminal forums, researchers have found. The threat group Aggah, believed to be...

CVE-2021-31399

On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack...

CVE-2021-31399

On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack...

Code injection

On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack...

CVE-2021-31399

On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack...

CVE-2021-31399

The CVE-2021-31399 issue affects 2N Access Unit 2.0 devices (version 2.31.0.40.5). An attacker can impersonate the web relay to perform a man‑in‑the‑middle attack, enabling potential credential exposure or session manipulation through a compromised web relay. Public details cover the affected dev...