10661 matches found
x86/efistub: Call mixed mode boot services on the firmware's stack
...
CicadasCMS 代码注入漏洞
CicadasCMS is a content management framework based on SpringBoot Mybatis SpringSecurity Vue developed by westboy individual developers in China. A code injection vulnerability exists in CicadasCMS version 1.0, which originates from the incorrect operation of the parameter categoryName in the file...
CVE-2025-10979 JeecgBoot exportXls improper authorization
A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be...
CVE-2025-59408
Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections...
CVE-2025-59404
Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot AVB and allows direct modification of partitions...
CVE-2025-20314
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper...
CVE-2025-20313
Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path...
Flock Safety The Bravo Compute Box 安全漏洞
Flock Safety The Bravo Compute Box is an edge computing device from Flock Safety USA. A security vulnerability exists in Flock Safety The Bravo Compute Box BRAVO00.00local20241017 version, which stems from the acceptance of the default Thundercomm TurboX 6490 Firehose loader, which could lead to ...
CVE-2025-59408
Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections...
PT-2025-39455
Name of the Vulnerable Software and Affected Versions Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017 Description The Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017 ships with Secure Boot disabled. This allows an attacker to flash modifie...
Do Not Start the debug-shell Service
The debug-shell service is used to locate faults that occur during system boot. This service is installed with systemd. The debug-shell service requires no authentication, that is, attackers can access the root shell by simply pressing Ctrl+Alt+F9 during systemd startup when the OS is booting. Th...
Linux Distros Unpatched Vulnerability : CVE-2025-39845
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mm/64: define ARCHPAGETABLESYNCMASK and archsynckernelmappings Define ARCHPAGETABLESYNCMASK and archsynckernelmappings to ensure page tables are properly...
CVE-2025-59408
Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections...
CVE-2025-59404
CVE-2025-59404 affects Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017. The underlying issue is an unlocked bootloader, which permits bypassing Android Verified Boot (AVB) and direct modification of partitions. This can impact integrity (I: HIGH) while confidentiality and ava...
Flock Safety The Bravo Compute Box 安全漏洞
Flock Safety The Bravo Compute Box is an edge computing device from Flock Safety USA. A security vulnerability exists in Flock Safety The Bravo Compute Box BRAVO00.00local20241017 version, which stems from a disabled secure boot, which could lead to an attacker flashing specially crafted firmware...
PT-2025-39454
Name of the Vulnerable Software and Affected Versions Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017 Description The device ships with its bootloader unlocked, which allows bypassing Android Verified Boot AVB and direct modification of partitions. This could allow an...
A Bootiful Podcast: Spring Batch lead Mahmoud Ben Hassine
Hi, Spring fans! In this installment we talk to the legendary lead of the Spring Batch project, Mahmoud Ben Hassine, about the latest-and-greatest in Spring Batch in the Spring Boot 4 generation...
CVE-2025-59408
The CVE-2025-59408 entry refers to Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 with Secure Boot disabled, enabling modification of firmware without cryptographic protections. The NVD/NVD-derived descriptions confirm the device can be flashed with modified firmware due to ...
