450 matches found
IntelTXE-PoC
免责声明 所有信息仅供教育用途。遵循这些说明的风险由您自行承担。作者及其雇主不对任何个人或组织因依据本页面所含信息采取行动或未采取行动而导致的任何直接或间接损害或损失承担责任。 目录 简介 所需软件 生成载荷 生成解锁令牌 准备 SPI 闪存镜像 将文件集成到固件镜像中 禁用 OEM 签名 构建固件镜像 启动主 CPU 将镜像写入 SPI 闪存 准备 USB 调试线 修补 OpenIPC 配置文件 解密 OpenIPC 配置文件 将 LMT 核心添加到配置中 设置 IPCPATH 环境变量 执行 JTAG 可操作性初步检查 显示 CPU ME 线程 停止核心 ME 调试：快速入门...
CVE-2018-16373
creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:11+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-28 00:00:55+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-29 00:00:15+00:00| published-proof-of-concept|...
CVE-2025-27708
The CVE-2025-27708 entry describes an out-of-bounds read in Intel CSME firmware (Ring 0) that may allow information disclosure. A local attacker with privileged user rights and high attack complexity could expose data without user interaction, with confidentiality impact High and no integrity/ava...
PT-2026-7295
Name of the Vulnerable Software and Affected Versions IntelR Converged Security and Management Engine CSME Firmware FW affected versions not specified Description An out-of-bounds read issue exists in the firmware within Ring 0: Kernel, potentially allowing information disclosure. A system softwa...
CVE-2025-27708: Out-of-bounds Read
Out-of-bounds read in the firmware for some IntelR Converged Security and Management Engine CSME Firmware FW within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may...
Intel Converged Security and Management Engine（CSME） 缓冲区错误漏洞
The Intel Converged Security and Management Engine CSME is a security management engine developed by Intel Corporation in the United States. The Intel Converged Security and Management Engine Firmware contains a buffer overflow vulnerability, which stems from out-of-bounds reads, potentially...
The vulnerability of the User Management Engine component of the SAP NetWeaver Java Application Server web application server allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the User Management Engine component of the SAP NetWeaver Java Application Server web application server is related to insufficiently secure data encryption. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
CVE-2026-0510 Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping
The User Management Engine UME in NetWeaver Application Server for Java NW AS Java utilizes an obsolete cryptographic algorithm for encrypting User Mapping data. This weakness could allow an attacker with high-privileged access to exploit the vulnerability under specific conditions potentially...
CVE-2026-0510 Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping
The User Management Engine UME in NetWeaver Application Server for Java NW AS Java utilizes an obsolete cryptographic algorithm for encrypting User Mapping data. This weakness could allow an attacker with high-privileged access to exploit the vulnerability under specific conditions potentially...
CVE-2026-0510: Inadequate Encryption Strength
The User Management Engine UME in NetWeaver Application Server for Java NW AS Java utilizes an obsolete cryptographic algorithm for encrypting User Mapping data. This weakness could allow an attacker with high-privileged access to exploit the vulnerability under specific conditions potentially...
CVE-2019-11131
Logic issue in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
CVE-2019-11097
Improper directory permissions in the installer for IntelR Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45,13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of...
CVE-2020-12608
An issue was discovered in SolarWinds MSP PME Patch Management Engine Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the...
CVE-2022-50784
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone If cloning the SKB fails, don't try to use it, but rather return as if we should pass it. Coverity CID: 1503456...
PT-2025-53924
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's iwlwifi component related to the mei driver. Specifically, a potential NULL pointer dereference can occur after an attempt to clone an SKB Socket Buff...
EUVD-2019-2801
Malware in sbrugna...
EUVD-2016-4723
Malware in sbrugna...
EUVD-2013-4096
Malware in sbrugna...