CVE-2017-2833: Improper Neutralization of Special Elements used in a Command

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters resulting in command injection during the...

Important: Red Hat Bug Fix Advisory: dracut bug fix update

Updated dracut packages that fix one bug are now available for Red Hat Enterprise Linux 7. The dracut packages contain an event-driven initial RAM file system initramfs generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kerne...

PT-2017-16096

Name of the Vulnerable Software and Affected Versions Lenovo E95 and ThinkCentre M710s/M710t affected versions not specified Description The system boot process is not adequately secured due to incomplete BIOS/UEFI initialization. This issue affects systems that were shipped from the factory...

CVE-2017-3771: Undefined Security Weakness

System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped from factory without completing BIOS/UEFI initialization process...

Citrix Provisioning Services Boot Process

This article explains Citrix PVS boot process in details...

Multiple Vulnerabilities Found in NVIDIA, Qualcomm and Huawei's Bootloaders

Six exploitable flaws in chipsets used by Huawei, Qualcomm, MediaTek and NVIDIA were found in popular Android handsets, according to a report by University of California at Santa Barbara computer scientists. Each of the flaws exist in phones sold by Huawei, Sony and Google, and are tied to each o...

For NXP I. MX microprocessor HAB vulnerability analysis-vulnerability warning-the black bar safety net

One, Foreword NXP（NXP）semiconductor production company i. The MX Series application processor of the Secure Boot features in the presence of two vulnerabilities, two vulnerabilities by Quarkslab the two researchers Guillaume Delugré and Kévin Szkudłapski found this article on the two vulnerabilit...

Google Android Unauthorized Operation Vulnerability (CNVD-2017-11467)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in Android, which stems from the program's failure to protect a memory region during the boot process. An attacker could exploit the vulnerability ...

PT-2017-7873

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue affects memory protection during the boot process in Android releases that use the Linux kernel. Recommendations At the moment, there is no information about a newer version that...

CVE-2016-10336: Undefined Security Weakness

In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot...

How to boot Windows VM in safe mode?

How to boot Windows VM in safe mode...

Cisco EPC3928 Information Disclosure Vulnerability

Cisco EPC3928 is a wireless router product from Cisco USA. A security vulnerability exists in the Cisco EPC3928. A remote attacker can exploit this vulnerability by sending a request during the pre-boot process to obtain sensitive configuration and certificate information...

CVE-2016-1337

Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requests during the early part of the boot process, related to a "Boot Information Disclosure" issue, aka Bug ID CSCux17178...

CVE-2016-1337

Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requests during the early part of the boot process, related to a "Boot Information Disclosure" issue, aka Bug ID CSCux17178...

Cisco Application Policy Infrastructure Controller Insecure Credentials Vulnerability

A vulnerability in the boot process of the Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, local attacker to access the APIC as the root user. The vulnerability is due to improper implementation of access controls in the APIC system. An attacker could exploit...

Cisco ASR 5000 Series Software Local Command Injection Vulnerability

A vulnerability in the boot process of the Cisco ASR5000 and ASR5500 ASK5K System Software could allow an authenticated, local attacker to cause commands to be executed during the boot process. The vulnerability is due to improper reading of a local file on Compact Flash CF during the boot proces...

BIOS Security Updates for Multiple Issues

Summary: New BIOS updates are available for Intel products. These updates harden the implementation against malicious inputs at various stages of the boot process and runtime. Description: This update addresses issues identified in the process of resuming from a sleep state, processing data store...

CVE-2014-4422

The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardening protection mechanisms by using a user-space process to observe data related to the random numbe...

CVE-2013-4875

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

PT-2013-5252

Name of the Vulnerable Software and Affected Versions Verizon Wireless Network Extender SCS-2U01 affected versions not specified Description The issue allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending...