Submissions from cert.org

		HTTP/2 implementations are vulnerable to "MadeYouReset" DoS attack (cert.org)
		7 points by pier25 7 months ago \| past
		SMM callout vulnerabilities identified in Gigabyte UEFI firmware (cert.org)
		3 points by campuscodi 8 months ago \| past
		Network Traffic Analysis with Silk [pdf] (cert.org)
		1 point by djakaitis on March 12, 2024 \| past
		Hard-coded credentials in Technicolor TG670 DSL gateway router (cert.org)
		1 point by qwery on July 12, 2023 \| past
		TCG TPM2.0 implementations vulnerable to memory corruption (cert.org)
		106 points by todsacerdoti on Feb 28, 2023 \| past \| 24 comments
		Microsoft Windows 10 gives unprivileged user access to system32\config files (cert.org)
		3 points by 6581 on July 21, 2021 \| past
		Finding Privilege Escalation Vulnerabilities in Windows Using Process Monitor (cert.org)
		25 points by po on June 10, 2021 \| past \| 8 comments
		BT Core and Mesh are vulnerable to impersonation and AuthValue disclosure (cert.org)
		2 points by giuliomagnifico on May 25, 2021 \| past
		CVE-2020-10148 SolarWinds Orion API authentication bypass allows remote comand e (cert.org)
		2 points by based2 on Jan 2, 2021 \| past
		SolarWinds Orion API authentication bypass allows remote command execution (cert.org)
		1 point by DyslexicAtheist on Dec 27, 2020 \| past \| 1 comment
		SolarWinds Orion API authentication bypass allows remote command execution (cert.org)
		1 point by svenfaw on Dec 27, 2020 \| past
		SolarWinds Orion API Auth Bypass (cert.org)
		1 point by zaltekk on Dec 26, 2020 \| past \| 1 comment
		IP-in-IP protocol routes arbitrary traffic by default (cert.org)
		81 points by afrcnc on June 2, 2020 \| past \| 13 comments
		Microsoft SMBv3 compression remote code execution vulnerability (cert.org)
		4 points by bifel on March 11, 2020 \| past
		Pppd vulnerable to buffer overflow due to a flaw in EAP packet processing (cert.org)
		2 points by based2 on March 7, 2020 \| past \| 2 comments
		Pppd vulnerable to buffer overflow due to a flaw in EAP packet processing (cert.org)
		2 points by aburan28 on March 6, 2020 \| past
		Microsoft Windows Remote Desktop Gateway allows for unauth remote code execution (cert.org)
		1 point by Sami_Lehtinen on Jan 14, 2020 \| past
		Microsoft Windows CryptoAPI fails to properly validate ECC certificate chains (cert.org)
		4 points by tosh on Jan 14, 2020 \| past \| 1 comment
		HTTP/2 imp. don’t robustly handle abnormal traffic and resource exhaustion (cert.org)
		1 point by nvr219 on Aug 14, 2019 \| past
		LLVMs Arm stack protection feature can be rendered ineffective (cert.org)
		1 point by wyldfire on July 18, 2019 \| past
		LLVM's Arm stack protection feature can be rendered ineffective (cert.org)
		26 points by ga-vu on July 15, 2019 \| past
		Microsoft Windows RDP Can Bypass the Windows Lock Screen Vulnerability Note VU (cert.org)
		2 points by based2 on June 13, 2019 \| past \| 1 comment
		Hacker exposes 0day Win10 local privilege escalation in ALPC interface with PoC (cert.org)
		1 point by lysp on Aug 28, 2018 \| past
		Linux IP Implementation Vulnerable to DoS Attack (CVE-2018-5391) (cert.org)
		1 point by xoa on Aug 15, 2018 \| past
		Linux TCP DoS SegmentAttack / FragmentAttack (cert.org)
		4 points by mohamedmansour on Aug 7, 2018 \| past
		Linux Kernel TCP Implementation Vulnerable to Denial of Service (cert.org)
		57 points by jeffmurphy on Aug 6, 2018 \| past \| 1 comment
		Bluetooth implementations may not sufficiently validate elliptic curve parameter (cert.org)
		1 point by hprotagonist on July 25, 2018 \| past
		Bluetooth implementations may not sufficiently validate parameters while pairing (cert.org)
		3 points by sohkamyung on July 24, 2018 \| past
		NPM fails to restrict the actions of malicious NPM packages (2016) (cert.org)
		2 points by fulafel on July 13, 2018 \| past
		CVE-2018-8897: List of vendors that know how to read Intel's docs (cert.org)
		2 points by app4soft on May 11, 2018 \| past \| 1 comment
		More

HN For You