CVE-2021-46772

Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory read and write, potentially resulting in memory corruption or denial of service...

CVE-2021-46772

Summary: CVE-2021-46772 describes insufficient input validation in the ABL that may allow a privileged attacker with BIOS/UEFI access to tamper with SPI ROM headers, causing out-of-bounds reads/writes and memory corruption or DoS. The Connected documents provide concrete mitigation details from A...

CVE-2021-26387

Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity...

CVE-2021-26387

CVE-2021-26387 describes insufficient access controls in the AMD ASP kernel that could allow a privileged attacker with access to AMD signing keys and BIOS/UEFI shell to map DRAM regions into protected areas, risking platform integrity. Public documents indicate this CVE is tracked within AMD sec...

CVE-2021-26387

Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity...

CVE-2023-20578: Time-of-check Time-of-use (TOCTOU) Race Condition

A TOCTOU Time-Of-Check-Time-Of-Use in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution...

CVE-2021-26387: Incorrect Authorization

Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity...

Dolphin 7.4.2 Blind SQL Injection Vulnerability

Exploit Title: Blind SQL Injection - dolphinv7.4.2. Date: 8/2024 Exploit Author: Andrey Stoykov Version: 7.4.2 Tested on: Ubuntu 22.04 Blog: https://msecureltd.blogspot.com/2024/07/friday-fun-pentest-series-8-dolphinv742.html SQL Injection: Steps to Reproduce: 1. Navigate to "Builders" menu 2. Th...

CVE-2024-43113

The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS 129...

CVE-2024-43113

The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS 129...

UBUNTU-CVE-2024-43113

The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS 129...

CVE-2024-43113

The CVE concerns Mozilla Firefox for iOS with versions older than 129. The issue arises from improper validation in the link context menu, enabling cross-site scripting via the contextual menu for links. Affected component: Firefox for iOS; root cause: input validation flaw in link context menu; ...

CVE-2024-43113

The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS 129...

PT-2024-30302

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 129 Description The contextual menu for links in Firefox for iOS could provide an opportunity for cross-site scripting attacks. Recommendations For Firefox for iOS versions prior to 129, update to version 129 ...

CVE-2024-43113: Improper Neutralization of Input During Web Page Generation

The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS 129...

September 26, 2023—KB5030310 (OS Build 22621.2361) Preview

September 26, 2023—KB5030310 OS Build 22621.2361 Preview Applies To Windows 11 version 22H2, all editions Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 11, version 22H2, se...

July 30, 2024—KB5040529 (OS Build 26100.1301) Preview

July 30, 2024—KB5040529 OS Build 26100.1301 Preview Applies To Windows 11 version 24H2, all editions Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. Note Follow @WindowsUpdate to find out when new...

March 28, 2023—KB5023778 (OS Build 22621.1485) Preview

March 28, 2023—KB5023778 OS Build 22621.1485 Preview Applies To Windows 11 version 22H2, all editions Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 11, version 22H2, see it...

June 27, 2023—KB5027303 (OS Build 22621.1928) Preview

June 27, 2023—KB5027303 OS Build 22621.1928 Preview Applies To Windows 11 version 22H2, all editions Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 11, version 22H2, see its...

November 15, 2022—KB5019157 (OS Build 22000.1281) Preview

November 15, 2022—KB5019157 OS Build 22000.1281 Preview Applies To Windows 11 version 21H2, all editions Note 11/8/22 IMPORTANT Because of minimal operations during the holidays and the upcoming Western new year, there won’t be a non-security preview release for the month of December 2022. There...