-
CVE-2025-23264 and CVE-2025-23265: About NVIDIA Megatron-LM (25-06-2025)
Preface: What Does “Linear” Mean in Machine Learning? In the context of machine learning and neural networks: A linear function is one where the relationship between inputs and outputs can be represented as a straight line (in 2D), or more generally, a hyperplane in higher dimensions. Background: NVIDIA Megatron-LM is an open-source framework designed for…
-
AMD Fixed CVE-2024-21969 (23rd June 2025)
CVE-2024-21969: Whispering Pixels: Exploiting Uninitialized Register Accesses in Modern GPUs. Preface: How to Enable Secure GPU Mode (Register Clearing) Background: The proliferation of graphics processing units (GPUs) has brought unprecedented computing power. Multiple register-based vulnerabilities found across different GPU implementations. So-called whisper pixels. The vulnerability poses unique challenges to an adversary due to opaque scheduling…
-
About Veeam Backup (CVE-2025-23120 and CVE-2025-23121) – 23-06-2025
CVE-2025-23121 NVD Published Date: 06/18/2025 NVD Last Modified: 06/18/2025 Preface: Veeam introduced a custom serialization formatter to protect against unsafe deserialization vulnerabilities (see below): -They override the default .NET deserialization behavior. -They validate or restrict which types can be deserialized. -This is a security hardening measure to prevent attackers from exploiting deserialization to execute arbitrary…
-
CVE-2025-52556: Insufficient verification of timestamp response signatures. Users should immediately upgrade to rfc3161-client 1.0.3 or later. (23-06-2025)
Preface: rfc3161-client version 1.0.3 is not designed to be installed on the server side. It’s a Python library, specifically a client-side tool, for interacting with RFC 3161 Time-Stamp Protocol (TSP) servers. It’s used to create timestamp requests and process timestamp responses, which is a client-side function of interacting with a time-stamping authority. Background: The primary…
-
When dreams come true (M78 Nebula) – 20-06-2025
Preface: When I was a kid watching Japanese science fiction TV series, the M78 Nebula is the location of the Kingdom of Light and the hometown of most Ultraman in the Kingdom of Light world. So believe that M78 Nebula was not real! At that time 70s, the internet technologies of today never been develop!…
-
Did Nikola Tesla encounter a solar flare in 124 years ago? (19-06-2025)
Preface: In 1901, engineer Nikola Tesla made the astonishing claim that he was receiving radio communications from Mars. His description was picked up and reported on broadly in the press. Reference URL – http://www.antihackingonline.com/science/a-hundred-years-later-communication-was-ready-to-receive-phone-call-again/ Background: Solar flares are a regular part of the solar cycle, which lasts about 11 years on average. In 1901, a…
-
CVE-2025-44952: About Open5GS (19-6-2025)
Preface: Open5GS is a popular open-source 5G core network (5GC) implementation, particularly among researchers and those building private 5G networks. It’s recognized as one of the leading open-source 5GC projects. Open5GS is known for its adherence to 3GPP standards and its mature development, making it suitable for various applications like testbeds, research, and even some…
-
CVE-2025-23252 – NVIDIA has released a software update for NVIDIA® NVDebug tool to address the security issue.(18-06-2025)
Preface: The NVdebug tool, used for NVIDIA GPU debugging, relies on the NVIDIA Data Center GPU Manager (DCGM) library. Specifically, it utilizes DCGM version 2.2.x or later. DCGM is a suite of tools for managing and monitoring NVIDIA GPUs in data center and cluster environments. Background: The NV Debug Tool is part of the NVIDIA…
-
CVE-2025-6087: About @opennextjs/cloudflare package (16-6-2025)
Preface: Next.js is a powerful React framework that simplifies web development by providing features like server-side rendering (SSR), static site generation (SSG), and API routes, all while offering built-in optimizations and a great developer experience. It’s essentially a framework built on top of React, adding extra functionality to create high-performance, SEO-friendly web applications. Background: The…
-
CVE-2024-55567: A vulnerability in the UsbCoreDxe driver of the InsydeH2O UEFI firmware, specifically due to improper input validation. (16-6-2025)
NVD Published Date: 06/12/2025 NVD Last Modified: 06/12/2025 Preface: InsydeH2O is a UEFI firmware developed by Insyde Software, used in a wide range of devices from servers to AI PCs. It’s known for its modular architecture, which allows for flexibility and faster development cycles. The kernel likely refers to the core components of this firmware,…