Preface: In computing, a segmentation fault (often shortened to segfault) or access violation is a fault, or failure condition, raised by hardware with memory protection, notifying an operating system (OS) the software has attempted to access a restricted area of memory (a memory access violation). Background: NJS is a subset of the JavaScript language that…

Preface: Combining kTLS and sendfile() means data is encrypted directly in kernel space, before being passed to the network stack for transmission. Background: improving web server on freebsd Linux performance with kernel tls (ktls).Kernel TLS operation – Linux kernel provides TLS connection offload infrastructure. Once a TCP connection is in ESTABLISHED state user space can…

Preface: Vendor did not describe in details, see whether this is the vulnerability they found? Background: The Android Runtime (ART) and managed core library (libcore) were part of the Runtime module effort in Android 10 along with the native runtime (Bionic) and ICU.In Android 11, ART and libcore are packaged as non-updateable APEX. Bionic and…

Preface: On Dec 2022, Microsoft has warned that malicious hackers were able to get the software giant to digitally sign their code so it could be used in attacks, such as the deployment of ransomware. Background: The newest update to AMD’s P-State EPP Linux driver hit today, offering better Ryzen & EPYC performance & better…

Prefect: The Lord taught Enoch that those who build their lives upon the Savior would never fall.Don’t mind about it was really had Lord or advanced civilization, human being go to digitization. In bible it mention about Lucifer. It is similar to cyber threat actor. Background: Technology trends from on-premises to cloud. Cloud-based attack most…

Preface: The Android operating system is mainly based on Linux, and its kernel is written in C language. Some modifications may have been done using the C++ language. Background:Get Group State – Different software uses different way (see below): static void GetGroupState (String unionID, String zoneID = “”, String extraJson = “”) ; Vulnerability details:…

Preface: WebKitGTK is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. Background: There is no Webkit. framework in Cocoa Touch. The webkit framework is only available on OS X. For iOS, just use UIWebview.The Core OS Layer is…

Preface: Use-After-Free (UAF) is a vulnerability related to incorrect use of dynamic memory during program operation. If after freeing a memory location, a program does not clear the pointer to that memory, an attacker can use the error to hack the program. Background: Background: tcindex, traffic control index filter. This filter allows to match packets…

Preface: During the learning process of artificial intelligence, he was always disrupted by vulnerabilities. Artificial intelligence said, to become an artificial intelligence, I will use my wisdom to create a perfect OS system. Background: Large scale of artificial intelligence structure especially machine learning may have a enterprise Linux system installed. The key component is shown…

Preface: Meltdown is a vulnerability allowing a process to read all memory in a given system. Background: The Xen Project is a free and open source type-1 or bare-metal hypervisor that enables a computer to run multiple operating systems simultaneously on the same hardware. A Type 1 hypervisor runs directly on the underlying computer’s physical…