BootHoleFix

Boot Hole Fix Este script corregirá el error BootHole identificado en CVE-2020-25632 y/o CVE-2021-20233. El 29 de julio de 2020, Microsoft publicó el aviso de seguridad 200011 que describe una nueva vulnerabilidad relacionada con Secure Boot. Los dispositivos que confían en la Autoridad de...

shim

shim, un bootloader UEFI di primo stadio shim è un'applicazione EFI semplice che, quando viene eseguita, tenta di aprire ed eseguire un'altra applicazione. Inizialmente proverà a farlo tramite le chiamate EFI standard LoadImage e StartImage. Se queste falliscono ad esempio perché Secure Boot è...

spring-break_cve-2017-8046

spring-breakcve-2017-8046 Este es un programa Java que explota la vulnerabilidad Spring Break CVE-2017-8046. Este software está escrito para tener la menor cantidad de dependencias externas posible. AVISO LEGAL Esta herramienta está destinada a ingenieros de seguridad y profesionales de appsec pa...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (2.1.10), com.gitee.kamismile:api (>=0.0.3, <=0.0.9) +44 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.12.11)

com.hazelcast:hazelcast MAVEN version 3.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter 2.1.10 - com.gitee.kamismile:api =0.0.3,...

ch.mobi.mobitor:mobitor-base (>=3.1.13, <=3.1.97), ch.mobi.mobitor:mobitor-doc (3.1.13) +39 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.11.2)

com.hazelcast:hazelcast MAVEN version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - ch.mobi.mobitor:mobitor-base =3.1.13, =2.1.6, =1.1.4, =2.1.4, =2.0.9.0, =0.1.0, =0.1.1 -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.7, <=2.0.3), com.github.wu191287278:spring-boot-starter-dubbo (>=1.5.3, <=1.5.33) +8 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.7.7)

com.hazelcast:hazelcast MAVEN version 3.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.7, =1.5.3, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...

log4j2-vulnerable-spring-app

Aplicación de muestra de prueba para Log4j 2 CVE-2021-44228 Basada en spring-boot-starter-log4j2:2.6.1 log4j 2.14.1 Endpoints disponibles Endpoint| Método de solicitud| Parámetros ---|---|--- vulnerablerequestget| GET| v=payload vulnerablerequestpost| POST| v=payload vulnerablerequestheaderua| GE...

K000163600: Spring Tools for Eclipse vulnerability CVE-2026-47873

Security Advisory Description The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier...

cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +15 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.8.3)

com.rabbitmq:amqp-client MAVEN version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream =a.1.1.1, =a.1.1.1, =1.11.0, =1.3.7-2, =1.19.1,...

CVE-2019-5700

CVE-2019-5700 Unfortunately, I don't have a trendy and clever name for this vulnerability. This bug is fairly simple to exploit. I actually sat on it for quite a while until I realized this might affect more devices than I initially thought. Scope: This bug affects Nvidia Tegra t114-t210 SoCs tha...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : U-Boot vulnerabilities (USN-8884-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8884-1 advisory. Timo Preil discovered that U-Boot incorrectly handled certain malformed ZFS file system...

USN-8884-1: U-Boot vulnerabilities

Timo Preißl discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An attacker could possibly use this issue to trigger an integer overflow and out-of-bounds memory access, resulting in arbitrary code execution or a denial of service. CVE-2025-70290 Timo Preißl...

USN-8884-1 u-boot vulnerabilities

Timo Preißl discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An attacker could possibly use this issue to trigger an integer overflow and out-of-bounds memory access, resulting in arbitrary code execution or a denial of service. CVE-2025-70290 Timo Preißl...

CVE-2026-25302

A cryptographic issue exists during the processing of non-ELF partitions , where authentication and signature checks are bypassed. This allows unsigned or corrupted images to be mounted and processed. The vulnerability is associated with Qualcomm hardware/software as indicated by the CVSS source....

CVE-2026-25302 Improper Verification of Cryptographic Signature in Boot

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed...

CVE-2026-25302 Improper Verification of Cryptographic Signature in Boot

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed...

CVE-2026-105573

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors...

EUVD-2026-92931

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors...

EUVD-2026-92813

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...

EUVD-2026-92811

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...