454 matches found
CVE-2025-32003
CVE-2025-32003 affects the firmware of Intel’s 100GbE Ethernet Network Adapter E810. The issue is an out-of-bounds read in the firmware (pre-firmware version cvl fw 1.7.6, cpk 1.3.7) that can allow a network-adjacent attacker with authenticated access and low attack complexity to cause a Denial o...
CVE-2025-27535
Exposed ioctl with insufficient access control in the firmware for some IntelR Ethernet Connection E825-C. before version NVM ver. 3.84 within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable...
CVE-2025-27243
Summary of CVE-2025-27243 : An out-of-bounds write in the firmware for some Intel(R) Ethernet Controller E810, prior to firmware cvl fw 1.7.8.x, can cause a denial of service. The impact is limited to availability with no confidentiality or integrity effects, but the attack is local and requires ...
CVE-2025-27243
Out-of-bounds write in the firmware for some IntelR Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result m...
CVE-2025-24851
CVE-2025-24851 affects Intel Ethernet Controller E810 100GbE firmware (cvl fw 1.7.8.x and earlier) running Ring 0 Bare Metal OS. The issue is an uncaught exception that may allow a local, privileged attacker with low complexity and no user interaction to cause denial of service, impacting availab...
[SECURITY] Fedora 43 Update: rust-coreos-installer-0.25.0-4.fc43
coreos-installer installs Fedora CoreOS or RHEL CoreOS to bare-metal machines or, occasionally, to virtual machines...
CVE-2025-32003: Out-of-bounds Read
Out-of-bounds read in the firmware for some 100GbE IntelR Ethernet Network Adapter E810 before version cvl fw 1.7.6, cpk 1.3.7 within Ring 0: Bare Metal OS may allow a denial of service. Network adversary with an authenticated user combined with a low complexity attack may enable denial of servic...
Intel® Ethernet Adapters 800 Series Advisory
Summary: Potential security vulnerabilities in the firmware for Intel® Ethernet Adapters 800 Series Controllers and associated adapters may allow denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-32003...
Our PR team awarded me the “The Best Positive Speaker 2025” metal pin for public speaking, articles, and media commentary
Our PR team awarded me the “The Best Positive Speaker 2025” metal pin for public speaking, articles, and media commentary. Huge thanks to my colleagues for this! I’m very pleased. 😇 The collection is growing. 😉 This time, the pin is styled like the Friends sitcom logo. It’s made of metal, coated...
The vulnerability of the Bare Metal Operator (BMO) software, related to insufficient spatial partitioning, allows a attacker to disclose protected information.
The vulnerability of the Bare Metal Operator BMO software is related to insufficient spatial partitioning. Exploiting this vulnerability can allow an attacker to disclose protected information...
Exploit for Out-of-bounds Write in Google Chrome
CVE-2025-14174 Analysis: ANGLE Metal Staging Buffer Out-of-Bou...
CVE-2025-7044
The set of connected documents confirms a concrete vulnerability in MAAS: the user websocket handler does improper input validation, enabling an authenticated, unprivileged attacker to intercept a user.update request and inject is_superuser = true, which can grant full administrative control over...
SUSE CVE-2025-61688
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, Omni might leak sensitive information via an API...
CVE-2025-61688
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, Omni might leak sensitive information via an API...
CVE-2025-61688 Omni leaks information via the API
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, Omni might leak sensitive information via an API...
PT-2025-41806
Name of the Vulnerable Software and Affected Versions Omni versions prior to 1.1.5 Omni versions prior to 1.0.2 Description Omni, a platform for managing Kubernetes, may disclose sensitive information through an API endpoint in affected versions. The platform operates on bare metal, virtual...
EUVD-2013-1110
Malware in sbrugna...
EUVD-2013-1109
Malware in sbrugna...