Servicing stack update for Windows Server 2012: July 12, 2016

Servicing stack update for Windows Server 2012: July 12, 2016 About this update This update fixes an issue in the Secure Boot Advanced Installer securebootai.dll to prevent it from making a system unbootable when you run the blacklisted boot manager in Windows Server 2012. How to get this update...

SQL Injection Vulnerability in Jeecg-Boot v2.1.4 at Beijing Guo Torch Information Technology Co.

Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Beijing Guo Torch Information Technology Co. Jeecg-Boot v2.1.4 suffers from a SQL injection vulnerability, which can...

CVE-2020-1618

On Juniper Networks EX and QFX Series, an authentication bypass vulnerability may allow a user connected to the console port to login as root without any password. This issue might only occur in certain scenarios: • At the first reboot after performing device factory reset using the command...

CVE-2020-10262

An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10. Attackers can activate the failsafe mode during the boot process, and use the miconsole command cascaded by the SN code shown on the product to get the root shell password, and then the attacker can i read Wi-Fi SSID or password, ...

CVE-2018-21070

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

CVE-2018-21070

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

CVE-2018-21070

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

CVE-2018-21070

CVE-2018-21070 affects Samsung mobile devices running N(7.x) or O(8.0) on MSM8998/SDM845 chipsets. The issue is a missing Bootloader integrity check that allows bypassing Secure Boot and gaining root access. The description from multiple sources attributes the vulnerability to a bootloader integr...

Tails 4.5 - Live System to Preserve Your Privacy and Anonymity

The Tails team is happy to publish Tails 4.5, the first version of Tails to support Secure Boot. This release also fixes many security vulnerabilities. You should upgrade as soon as possible. New features Secure Boot Tails now starts on computers with Secure Boot enabled. If your Mac displays the...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-32823)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A security vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to successfully boot a Samsung Galaxy Note8 device with root...

SQL Injection Vulnerability in Jeecg-Boot of Beijing Guo Torch Information Technology Co.

Jeecg-Boot is a rapid development platform based on a code generator. Jeecg-Boot has a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from a database...

CVE-2017-18649

An issue was discovered on Samsung mobile devices with N7.x software. An attacker can boot a device with root privileges because the bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, aka the "SamFAIL" issue. The Samsung ID is SVE-2017-10465 November 2017...

CVE-2016-11026

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 software. BootReceiver allows attackers to trigger a system crash because of incorrect exception handling. The Samsung ID is SVE-2016-7118 December 2016...

Dell Latitude 7202 Rugged Tablet BIOS Resource Management Error Vulnerability

Dell Latitude 7202 Rugged Tablet BIOS is a basic input/output system BIOS for the Dell Latitude 7202 Tablet PC from Dell USA. A resource management error vulnerability exists in EFIBOOTSERVICES in System Management mode in Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28. An attacker...

CVE-2019-12380

A flaw was found in the Linux kernel's implementation of UEFI. An attacker who can influence early-boot memory initialization could possibly influence firmware initialization and memory allocations, resulting in a panic of a guest or target system during early boot of that same system...

LY Corporation: Spring Actuator endpoints publicly available and broken authentication

Due to insufficient access control, it was possible to access the Spring Boot Actuator endpoints /heapdump and /env. @kazan71p identified two highly sensitive applications leaking information through these endpoints. The LINE Security team shutdown the secondary endpoints just as it was discovere...

CVE-2020-5348

Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFIBOOTSERVICES in system management mode. A local unauthenticated attacker may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in system management mode...

Wiper Malware Called "Coronavirus" Spreads Among Windows Victims

A new Windows malware has emerged that makes disks unusable by overwriting the master boot record MBR. It takes its cue from the COVID-19 pandemic, calling itself simply “Coronavirus.” Overwriting the MBR is the same trick that the infamous NotPetya wiper malware used in 2017 in a campaign that...

CVE-2019-9436

In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation...